Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: pRoH6BzviJ8XqXVclsCiNLYvOzo1XtQhwaKzUOSUyXk=
Subject key identifier: AD:3A:00:E9:BD:78:BE:60:6A:9C:65:11:74:F9:30:1D:5E:BE:76:16
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 0199FFFE2AA8D5636DB722FB10ADDC0A5433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0FC1
Signing time: Mon 20 Oct 2025 05:01:11 +0000
Manifest this update: Mon 20 Oct 2025 05:01:11 +0000
Manifest next update: Tue 21 Oct 2025 05:01:11 +0000
Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: ywIPbnKMA/O14rg9cFeYbyC94KiN0LGR9IQ3Mty8Lr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:2a:a8:d5:63:6d:b7:22:fb:10:ad:dc:0a:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Oct 20 05:01:11 2025 GMT
Not After : Oct 21 05:01:11 2025 GMT
Subject: CN=ad3a00e9bd78be606a9c651174f9301d5ebe7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:90:9c:32:da:60:b2:65:21:51:61:a8:d0:
de:e1:c9:42:e6:23:f4:63:5e:57:c1:91:47:16:4b:
5e:27:2c:ea:bc:56:e9:d9:6d:bc:33:3f:ab:5c:54:
3e:4e:0a:7c:98:ee:18:7d:f1:74:0c:79:b9:3a:98:
50:62:66:1c:b6:e3:1a:59:c6:f1:d7:59:13:b6:c2:
b1:a4:85:7f:d0:f6:fa:8b:61:af:7f:f8:e9:8a:9a:
eb:be:12:ff:9b:55:db:6e:73:49:b2:33:fc:03:82:
1e:48:a9:09:36:b0:8b:4d:71:eb:ea:4f:56:87:a4:
10:76:0d:ed:a1:84:1e:a9:1c:28:94:09:e5:50:31:
51:26:ce:16:cd:55:cc:51:f9:a9:ec:71:ae:a2:2e:
18:6e:55:5e:81:7b:8f:a3:33:fc:6a:b4:ee:1d:86:
3e:59:35:9b:07:e8:6d:b4:26:76:46:8d:29:7f:67:
d6:63:bf:c1:b7:dd:d5:e1:ae:ef:75:38:98:94:47:
0f:41:2e:b7:10:37:5a:1f:92:76:b1:ca:63:21:0b:
95:09:b4:91:74:93:94:1b:b8:05:9c:ee:79:b9:ea:
98:7e:5f:3b:97:ea:6f:12:a7:43:41:9c:a3:32:2d:
a9:9b:f8:30:8a:0a:96:65:86:4a:6c:4c:35:56:38:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3A:00:E9:BD:78:BE:60:6A:9C:65:11:74:F9:30:1D:5E:BE:76:16
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:70:c9:1f:b6:99:55:dc:a5:5d:0a:af:7e:48:c2:5c:bd:62:
9f:1c:3c:b2:48:d1:81:c3:cc:60:e3:0c:0f:4f:89:2e:c5:dd:
9e:6f:16:41:d5:d5:39:31:df:79:ea:fb:1f:12:76:81:6a:36:
7f:cf:ed:90:db:75:f5:2a:84:04:04:59:6b:2d:39:25:e3:ac:
4c:cc:fb:71:04:f3:0e:17:5b:f7:b9:a1:8d:c7:d5:7c:32:23:
c8:19:e8:4e:a9:c4:d9:cc:8e:88:12:73:94:2d:78:31:1f:16:
b5:3d:20:81:50:26:d0:33:60:83:0c:4d:91:08:ae:87:60:bb:
e4:c1:e1:b3:db:e1:31:31:63:c4:a1:2e:aa:a2:9f:c4:ef:fb:
12:4d:66:5e:4f:7e:1b:17:7f:ec:6d:d8:38:1c:50:f0:c0:34:
14:77:d6:d8:cf:26:16:f7:31:3a:38:36:b4:a6:25:e6:53:f3:
bf:aa:42:1f:e4:a2:15:57:7f:6d:9d:87:70:af:86:46:1a:2b:
02:e9:ea:5b:b7:ac:53:dd:de:d5:bd:3b:0a:a5:5d:be:f0:ec:
86:59:43:cc:3c:03:8e:6a:a9:34:d1:6b:ea:f1:c8:1e:51:0a:
b5:92:77:48:39:88:73:88:af:b5:23:b8:c7:16:a5:44:52:4b:
82:85:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:35 2025 by rpki-client