Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: SIi1TAwbiJkZ4TFyda7mAYdB8SBhKtqM7RAD5HrFEpo=
Subject key identifier: 34:69:0D:D9:4A:AD:94:14:4E:6A:69:E9:89:B1:A1:F9:83:9A:16:EE
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 0198D4DFDC2EDBCC949CAD0080D806916AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: JiiVsUG3eMk8liII7neROQP+Ln2ldiQlQnUMD3W/5U0=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:2e:db:cc:94:9c:ad:00:80:d8:06:91:6a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=34690dd94aad94144e6a69e989b1a1f9839a16ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:7a:9d:9d:a0:15:85:c6:59:ab:94:4a:6e:
aa:6a:d8:f2:55:b8:9e:4d:21:29:38:40:6c:c6:4d:
b0:89:0d:49:b6:e9:3d:59:9e:d5:e3:5a:cc:d2:b9:
2a:04:32:e3:3a:42:a1:b9:87:99:a6:7e:13:68:99:
3b:51:59:ad:73:4b:89:79:bd:ff:5c:e0:b1:e2:2e:
5e:fc:4d:36:3d:23:94:51:84:ed:e8:95:f6:9b:9c:
11:cb:0d:0f:81:6f:45:a2:fc:2e:ab:51:be:84:20:
d2:e5:3c:ac:21:35:74:cf:4a:33:e8:4d:34:b1:9f:
de:2e:b8:c7:c3:25:ab:53:1c:39:34:40:ff:57:b5:
dc:ed:1e:b6:28:28:48:ea:99:28:76:94:e4:40:4c:
94:9c:60:d7:1c:b6:3f:03:e7:98:bb:bf:13:64:53:
fe:67:18:75:e6:92:78:25:fa:7d:be:80:46:d4:2a:
54:0d:86:ba:a4:09:24:6a:2d:68:77:2c:bd:49:79:
c3:8a:82:51:8b:88:26:8b:52:16:a9:ad:b6:c3:be:
e2:e4:93:cc:53:e8:dd:2f:5f:7b:63:e4:5f:f1:9f:
ec:29:72:7f:ea:27:34:28:35:70:50:84:43:21:9f:
4f:e7:0a:f3:91:95:2b:34:90:d8:59:1f:9c:a1:3c:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:0D:D9:4A:AD:94:14:4E:6A:69:E9:89:B1:A1:F9:83:9A:16:EE
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9f:87:65:95:97:0e:41:0d:a7:c2:1c:79:59:7b:85:02:0a:
d8:64:ab:51:4a:23:1a:99:69:b2:01:61:f2:c4:69:ea:c2:31:
27:e6:e5:e1:d6:13:5a:e1:a2:a7:e9:b4:82:3b:f7:ce:11:56:
39:d3:bb:63:07:88:cf:67:75:4b:c2:ef:b0:38:6f:3f:88:5f:
1f:59:ad:ac:dc:7f:08:ab:88:8a:f9:d0:dc:fc:af:24:7d:1b:
84:ce:d5:ab:63:07:a3:6f:7a:5d:15:7e:e3:ee:b4:2a:d0:ca:
37:52:db:67:fd:82:c4:cc:46:33:ea:05:c9:66:8b:76:91:55:
a8:c8:6d:ae:87:16:3f:40:3b:08:4b:82:18:e9:fe:d9:a3:1a:
ff:73:f6:a8:e7:64:1f:2d:cc:2e:73:64:dd:6e:f9:fa:ad:b1:
64:0f:a0:89:1d:a0:3c:35:27:0f:43:f9:79:bc:50:2b:66:2d:
5b:36:bb:c4:ec:bf:70:ac:92:f1:2c:7c:1f:8a:f4:5d:cf:52:
79:38:2e:2f:ed:52:33:07:b3:bd:47:1c:f8:bc:f0:3b:4c:bb:
17:25:41:2f:c3:42:6b:d3:4d:0d:e6:41:b3:01:4a:65:62:69:
9e:1a:b2:8a:6d:27:d4:01:04:e1:bd:3b:ae:4b:e5:b7:57:53:
0a:0a:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:16 2025 by rpki-client