Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: slO+3VjAiAt9d83IQSdZ7XPe8VyTW8s+PiWjbmCqkMk=
Subject key identifier: 54:0E:B4:71:C5:42:CE:44:F0:FC:22:65:E3:23:C6:66:50:6B:72:68
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 0198D6618E429742C0A9F673FA57C9C240D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0A5E
Signing time: Sat 23 Aug 2025 10:02:54 +0000
Manifest this update: Sat 23 Aug 2025 10:02:54 +0000
Manifest next update: Sun 24 Aug 2025 10:02:54 +0000
Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: NqlXyQkjQY6msg2CtWc12mx4d8glMsYZm1/7mDyvky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:8e:42:97:42:c0:a9:f6:73:fa:57:c9:c2:40:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: Aug 23 10:02:54 2025 GMT
Not After : Aug 24 10:02:54 2025 GMT
Subject: CN=540eb471c542ce44f0fc2265e323c666506b7268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:13:04:2a:07:3e:b6:d0:fe:24:56:c0:54:
e0:b4:c9:5a:12:8e:f7:eb:e7:6b:42:f3:98:6d:da:
ac:ef:83:e9:db:ad:e6:98:bd:f5:70:68:e4:0c:8e:
85:ba:b0:9e:2b:4f:a0:bb:d7:4d:0d:4f:c6:d6:bc:
f6:bb:0d:c7:44:e5:7c:e0:bb:c5:66:38:8a:66:39:
5b:a6:5b:83:54:35:65:fb:12:33:19:78:76:fe:67:
83:c2:9e:2f:8d:3d:e9:bc:1a:86:50:15:38:55:fd:
01:89:5f:da:e6:10:51:39:bf:f5:2d:29:ab:1f:8a:
da:8f:da:48:1b:d5:1e:0d:4d:92:32:b3:a3:24:2a:
82:e6:c2:33:29:a6:21:ad:28:87:49:e1:44:77:c9:
3f:d8:f5:66:2c:ef:1e:2a:6f:35:7e:fe:74:e8:68:
6c:99:75:c3:be:69:17:77:b7:25:c5:74:4b:43:bb:
bb:1a:4d:61:1d:7d:91:ad:6c:7f:5a:3f:f4:e6:ab:
75:ab:65:d3:3c:bf:00:02:45:97:f4:84:d2:0c:dd:
b1:20:36:cb:9d:c5:bf:49:e9:be:e8:5f:fe:f6:de:
85:94:e4:3a:29:80:96:78:49:cc:af:47:f8:99:39:
ed:67:c8:4b:cd:d1:0e:6e:40:11:ea:bf:29:64:e3:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:B4:71:C5:42:CE:44:F0:FC:22:65:E3:23:C6:66:50:6B:72:68
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:52:fd:32:01:45:65:9c:b7:7b:f3:99:49:89:43:a6:2f:
e8:e7:f7:e7:f5:9d:a3:ce:01:f0:cd:b7:1e:df:9f:47:1f:5b:
ca:6b:f8:97:50:fc:7b:45:ae:17:6a:e6:6b:f2:e6:92:0b:1f:
73:6f:0b:93:a5:d2:ec:5c:1e:65:28:67:9e:91:a3:57:90:28:
e4:de:2c:66:49:9e:f4:1c:f8:b4:75:39:d2:bb:f0:e7:92:3e:
e6:44:fb:da:c4:b8:de:32:30:d1:f2:e9:f0:cd:0d:c4:0b:50:
d2:72:f0:76:66:e7:20:53:5d:3e:75:09:ce:b4:23:80:9c:06:
fe:a5:07:b6:be:6d:6a:39:17:64:0c:72:8f:c4:0b:b4:19:be:
0d:d2:2c:54:22:05:7a:e9:48:64:7c:ae:07:7e:24:5b:b5:26:
5e:75:5c:ab:11:4c:f5:5a:1c:65:11:fa:ee:66:26:41:85:f1:
7e:26:18:92:cb:86:04:f6:64:d2:1b:71:86:83:fd:59:95:51:
da:47:51:54:d9:48:6b:93:d3:86:67:de:ce:0f:96:3c:e1:57:
d9:27:71:b3:9b:32:53:75:2b:b3:c9:34:de:28:0c:aa:7f:2e:
3a:5a:df:51:33:f8:4b:08:06:54:c6:cf:bf:b3:4a:a9:45:60:
25:8e:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:13 2025 by rpki-client