Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: CQ2LHLUIUded9M2oqZJSmzNtNBE7tICiX2+Uywl5TOM=
Subject key identifier: C6:A0:6A:77:27:EF:4A:82:7A:6F:12:99:6F:64:44:E6:B3:1A:BA:90
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 0198D473B119916AFD0B25650607AEA8B4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:03:28 +0000
Manifest this update: Sat 23 Aug 2025 01:03:28 +0000
Manifest next update: Sun 24 Aug 2025 01:03:28 +0000
Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: ltWtmkp/QG+eZCVYCUlpZaHa770fJUqEXRWC1dOiMUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b1:19:91:6a:fd:0b:25:65:06:07:ae:a8:b4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Aug 23 01:03:28 2025 GMT
Not After : Aug 24 01:03:28 2025 GMT
Subject: CN=c6a06a7727ef4a827a6f12996f6444e6b31aba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:f2:7a:56:6e:29:b2:ce:af:7c:8f:68:22:
b9:9b:d6:7c:8f:43:c6:0a:78:98:ab:76:aa:ed:53:
98:5b:bb:c6:bc:2c:56:7e:de:f1:7e:9d:98:b4:be:
2f:11:4a:b4:e3:78:46:fe:33:d5:c1:24:45:aa:e5:
01:60:5f:b5:fa:0c:05:d1:32:55:85:20:2d:f3:44:
61:a2:6d:69:c4:1d:64:a8:85:90:e1:b4:8b:19:bb:
61:0c:9d:97:1f:fe:f9:3e:81:64:74:85:ff:6e:2d:
92:f5:45:df:ca:c8:a7:cc:ad:40:ac:e8:fe:e3:fd:
f3:3b:80:df:af:8f:ec:b1:5c:e7:80:2f:33:f1:63:
b7:23:10:70:b1:e7:18:cc:2f:be:7a:36:c8:0f:dc:
0f:57:cb:91:6d:f8:7b:75:bb:97:9d:95:36:c5:ca:
32:05:7a:da:03:ab:33:34:a8:05:ec:4d:fb:c5:80:
91:33:8f:7c:27:5b:30:6f:54:9e:7c:51:96:f2:1b:
54:1e:4a:f3:71:29:6c:4b:74:bc:8b:13:51:b4:d4:
f7:c0:ab:51:d0:20:14:3e:03:07:b7:b4:37:f2:7a:
b7:60:c4:1c:8a:c6:e5:65:9d:e2:68:cb:1c:38:1b:
55:bc:36:2b:32:aa:d0:9f:2d:6d:4d:21:e0:12:14:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:6A:77:27:EF:4A:82:7A:6F:12:99:6F:64:44:E6:B3:1A:BA:90
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:37:22:0b:0f:2c:45:ac:91:db:1e:84:e5:35:29:0c:af:
9e:aa:b4:4c:f7:3a:4d:df:14:2e:07:4b:07:21:04:3e:f5:fb:
62:49:e8:10:94:aa:40:4e:21:cf:03:d1:a2:91:8c:f2:e8:66:
6f:0c:82:6c:f1:45:89:86:ac:2f:6a:2f:c2:2b:93:2f:5b:e8:
5e:34:ec:87:4a:51:16:84:5d:12:01:81:1d:c1:26:18:6c:3f:
f5:42:14:cb:72:1c:1d:22:b7:31:d3:11:d4:f0:2a:c8:b4:53:
2c:98:df:56:da:ac:e3:5c:55:1f:da:06:df:01:f7:97:f9:50:
ca:7c:7f:98:cb:fe:db:de:8e:4c:b9:d4:87:9d:4f:e5:5e:7d:
a8:eb:79:d7:c2:6b:1d:e4:65:a7:a8:59:ba:99:04:fa:da:76:
78:c0:0a:d7:24:33:dd:08:6a:7a:97:22:f6:10:85:b1:5b:19:
38:37:e8:6f:fa:3c:1d:2c:98:0a:6b:7c:ec:65:04:bc:b1:9f:
09:51:da:72:82:30:48:4e:27:80:1d:40:ca:15:6e:64:20:22:
c0:cc:d1:d4:f9:e7:58:8c:81:fd:c2:33:81:99:c5:84:85:a9:
f1:6b:58:1a:f1:c3:86:2a:6b:00:0c:f1:19:29:26:94:32:fa:
45:3b:6a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client