Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: i8gNSU5VTplTF1koA0Czow5PgRGnNcvSAZd+De5IqSQ=
Subject key identifier: AE:06:A4:E9:8A:75:D2:FB:56:B9:E7:F6:E8:3C:B8:63:F8:2B:42:5C
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 0198D705EB6B68E6963F2E916EEBC3B9D90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 13:02:26 +0000
Manifest this update: Sat 23 Aug 2025 13:02:26 +0000
Manifest next update: Sun 24 Aug 2025 13:02:26 +0000
Files and hashes: 1: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: 9XICZ9lAmdpBh94DnZTwfJJvT8xyTMkCQq3ervgsL5Y=)
2: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (hash: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:eb:6b:68:e6:96:3f:2e:91:6e:eb:c3:b9:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Aug 23 13:02:26 2025 GMT
Not After : Aug 24 13:02:26 2025 GMT
Subject: CN=ae06a4e98a75d2fb56b9e7f6e83cb863f82b425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:06:c2:8f:1f:d5:b9:c2:04:03:6c:f3:5c:
72:c6:04:e4:89:5a:9a:45:64:eb:ac:ec:1e:e2:40:
d8:99:b7:78:e1:b8:9b:c9:61:bd:7b:6d:4b:5b:ee:
bd:cf:40:01:35:b6:be:d2:bf:c0:62:a2:fb:8a:fe:
59:0c:9a:c5:39:d8:12:96:fb:88:ac:3e:4e:cb:ab:
96:fd:41:77:25:1f:85:52:a7:8e:50:8a:a2:bc:04:
80:07:77:ce:79:83:fa:32:01:2d:73:55:b4:d0:25:
1e:eb:9b:70:c5:63:19:17:cb:8c:74:54:ea:41:f6:
bd:0f:46:d4:3a:d1:09:ec:7b:85:57:9b:0b:37:d1:
b0:64:ba:37:f3:8f:90:77:f3:63:db:7b:41:dc:df:
9d:b0:82:c7:2a:10:e5:cf:22:67:28:2f:4b:53:8c:
c8:11:8e:db:73:97:61:2a:fa:ea:d9:f4:ff:e1:66:
a0:fe:2d:af:97:88:a4:eb:fc:f7:f5:79:00:6e:ee:
aa:6d:cc:79:13:51:9c:61:c5:b2:d3:f1:c6:37:6f:
b0:ac:a4:6b:3e:c2:8b:44:eb:78:a6:e8:8f:f3:41:
53:3e:8b:db:37:81:30:f8:72:28:f7:88:12:b0:d3:
f0:8b:dc:94:b3:10:a7:1d:f4:d3:34:d4:18:b0:17:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:A4:E9:8A:75:D2:FB:56:B9:E7:F6:E8:3C:B8:63:F8:2B:42:5C
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:75:de:e4:8b:39:35:d7:a0:2b:59:76:89:4d:45:1e:3f:45:
13:0c:c3:74:42:7b:c4:39:87:2e:8e:4a:19:0f:46:1a:5c:04:
3d:0b:77:cb:68:4e:e0:ab:85:4f:c7:38:d2:37:c1:7f:53:9f:
cf:c5:7a:c7:bf:9c:f1:0f:b6:7a:f2:f3:ed:93:9b:ba:de:0a:
05:10:ba:44:34:c8:c9:3e:b4:a2:bf:6d:24:08:54:52:59:85:
fd:2b:9e:1b:01:02:ae:55:65:4b:d3:67:d0:2d:b8:c3:e1:d0:
57:dc:28:05:24:03:80:fc:c4:83:de:92:8c:50:37:03:38:0a:
75:71:dd:c5:30:2b:2c:99:f7:74:d0:7f:78:95:bc:e1:c2:bb:
81:14:d5:b2:f7:0e:2a:40:82:a0:95:c4:7b:5d:0b:c3:3f:98:
82:e6:85:ab:6c:4e:a3:76:58:36:93:28:04:df:9d:e0:84:55:
f3:d0:1a:d8:28:df:c6:75:b3:41:d7:93:9e:fb:57:f0:15:72:
fa:b0:86:6f:78:cc:2d:6c:ed:2f:a7:e7:05:86:d9:75:62:f9:
a6:f2:1b:6e:34:45:64:81:68:6f:ef:ef:32:dc:04:48:ec:2c:
d0:11:cf:8d:90:d0:6d:f1:c0:1c:7f:a2:bd:92:6e:5c:23:98:
81:67:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:28 2025 by rpki-client