Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: ERmbnwuXL2BJpYc0SaJ4esNSxyKSbRXSU+JM0h0tuPU=
Subject key identifier: 59:4D:38:79:0A:F0:E3:05:4C:AD:7F:3F:4F:77:DE:4F:93:5A:66:43
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 0199FCC6A26B97939A9CB9C6950D3621660C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 0A54
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: V5cIKhWMPPyzXIOSHEQkNcbifdC2alBxqbJFFHTY4xo=)
2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a2:6b:97:93:9a:9c:b9:c6:95:0d:36:21:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=594d38790af0e3054cad7f3f4f77de4f935a6643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e9:2e:e2:58:02:8d:5b:0a:f5:06:83:a6:
ff:37:b5:88:42:0d:79:17:d7:55:15:ae:e2:69:81:
bf:94:4e:58:5a:1a:2a:08:8a:7a:3f:fe:35:66:62:
b7:d6:98:9e:79:63:6d:67:98:d0:d4:45:91:51:bc:
3e:44:a3:8a:a3:65:aa:87:60:fc:d7:2a:d2:45:2c:
da:6d:d9:3c:e1:6e:d8:4c:1f:b7:7b:d1:44:05:e8:
60:0a:61:a4:c0:b6:fa:ae:af:3e:42:1f:95:f4:e3:
6a:44:8f:5c:b2:30:d3:0f:a3:c3:02:13:93:e1:ab:
b3:99:e0:b1:55:b0:b6:5b:78:bb:a6:d0:cf:b6:8a:
1e:ae:b2:17:b4:2e:74:e3:0f:53:1d:04:40:d4:a2:
14:00:5d:47:95:cf:dd:5f:8e:33:c9:7e:75:0f:40:
12:f0:71:7a:82:51:58:b7:1e:93:f7:92:1c:47:3f:
7a:7f:97:94:cd:b0:b9:d5:d4:49:68:95:e1:9c:02:
96:9d:59:9b:8c:a7:9c:1c:18:c4:b9:ca:a9:54:1f:
80:c2:f6:4c:07:81:0c:d3:b7:5c:b0:63:21:5c:67:
44:09:62:0d:ea:37:93:6f:6f:2b:da:b6:9d:9f:45:
c4:81:d1:be:39:b8:e5:e6:30:f9:e3:4c:db:33:96:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:38:79:0A:F0:E3:05:4C:AD:7F:3F:4F:77:DE:4F:93:5A:66:43
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5c:4c:6a:7b:b2:de:e8:39:34:10:e9:8a:94:b9:51:db:0a:
3f:f3:af:5e:af:06:10:f2:da:81:d6:36:69:21:89:84:3a:e8:
ca:ba:bd:b4:cf:47:2b:34:5c:ae:9f:0c:8b:b5:23:f1:67:25:
ee:ba:9c:40:12:26:d1:8c:cc:83:f9:d0:af:d8:25:cd:2e:72:
f0:9c:00:66:97:a3:ad:89:38:e6:e7:d7:21:1e:5c:62:6c:13:
fe:c6:bf:a7:31:23:b3:19:3b:f6:b9:38:ec:b3:c3:5b:d5:0b:
2c:44:63:76:7a:99:db:70:e8:ed:26:f4:d1:96:63:c3:79:dd:
b0:cf:b6:9e:ee:b0:49:75:f9:68:71:02:c9:0b:2a:2a:9b:e5:
dc:97:b7:75:77:ba:c6:8b:c5:10:33:99:33:67:83:70:ca:f2:
dc:92:13:02:03:dd:19:6e:31:8d:8a:eb:c9:c7:04:b2:30:03:
50:78:53:26:38:5d:8d:04:1e:c1:df:25:04:e5:b7:54:20:c4:
09:0d:5f:7b:23:ed:65:ba:b3:7b:12:80:8e:13:e1:fb:68:5e:
5c:cc:78:e5:c6:6d:8b:42:4a:b3:d4:95:f3:48:e9:7d:66:ed:
2a:40:81:ee:9c:e2:1e:f4:9d:16:e9:c1:9d:a5:50:5e:59:f5:
22:a2:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:49 2025 by rpki-client