Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: t43GFcCFQzdx3cbsj/W4L+hRlaoxAs4PMjK1PZ4v02w=
Subject key identifier: 23:59:FB:9D:0A:9A:6D:AB:8E:E7:88:81:E4:2C:E5:05:82:8A:93:E5
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019889FBE4EDDF62389CFCCA24705504A6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 14:00:43 +0000
Manifest this update: Fri 08 Aug 2025 14:00:43 +0000
Manifest next update: Sat 09 Aug 2025 14:00:43 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: kYFWweNzGSCFMnXbxB4ZgIb6jPh4oD/hwlvTJbyRy6Q=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:e4:ed:df:62:38:9c:fc:ca:24:70:55:04:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Aug 8 14:00:43 2025 GMT
Not After : Aug 9 14:00:43 2025 GMT
Subject: CN=2359fb9d0a9a6dab8ee78881e42ce505828a93e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:fb:c7:9a:62:81:cf:d1:a7:ed:91:41:a4:
c7:e2:7b:9d:5d:09:43:58:77:c5:fb:32:87:77:8a:
17:39:53:5a:6b:b7:55:b9:6f:1f:53:7f:78:7d:a3:
c6:e7:b3:74:2c:e2:84:56:ec:8a:93:eb:d7:a9:f5:
67:db:54:60:1c:b5:1c:98:08:27:f3:67:c4:0e:25:
5f:66:58:1e:55:40:9a:e2:b9:25:b7:12:7d:4f:4b:
4a:68:94:d3:54:b4:39:e9:38:25:4c:e3:2b:16:29:
ed:b7:71:b4:c4:38:e9:06:e4:da:7a:89:02:8c:bb:
6e:4a:ac:31:a4:ec:ac:4b:fc:d4:f2:bb:b4:e6:86:
eb:31:f9:21:40:52:91:ac:97:b2:97:30:80:98:f2:
19:c2:66:90:48:b2:0d:3e:6f:c3:ac:4a:ba:07:0d:
b6:b1:ca:cb:08:18:17:65:5b:7f:d6:d3:57:98:de:
6d:bb:6d:1a:c5:43:7d:a5:30:3e:8a:f8:95:e8:e6:
39:4c:ea:10:42:1a:2b:91:03:ee:7a:5f:64:c6:15:
60:0e:88:f6:72:0d:63:c8:89:c8:30:81:08:68:79:
af:ce:e2:78:df:af:e6:af:1e:e6:fb:ba:00:46:c8:
39:c2:19:b5:8d:fd:4d:49:26:44:7f:86:9c:bc:73:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:FB:9D:0A:9A:6D:AB:8E:E7:88:81:E4:2C:E5:05:82:8A:93:E5
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:00:41:98:ef:e8:a9:89:c3:b1:c4:50:2e:94:f3:30:a8:17:
8e:e8:57:25:a6:85:bb:49:bd:f4:57:b1:4f:07:47:8e:83:c1:
6e:39:10:49:74:b1:ff:ca:ca:aa:c5:6a:c5:bf:e7:d6:28:46:
eb:04:5a:13:9b:3d:f6:9d:df:79:10:4a:7d:68:19:fb:92:40:
e6:37:5d:1b:b2:f1:e1:67:99:7a:4c:9b:ac:80:85:36:04:6a:
dc:97:cd:ff:f4:80:3c:74:ae:0d:19:2f:90:2b:f5:fc:c6:39:
42:c1:ab:bf:97:c3:9b:20:af:37:b6:c7:d6:8b:d7:15:71:3c:
d4:16:a5:d6:99:74:c0:10:62:22:bb:69:4e:7a:70:08:9e:66:
4d:e6:54:76:da:f1:fb:ac:e9:19:33:30:e1:7d:95:a6:ed:71:
3c:30:d9:34:77:94:b1:0f:68:98:ea:0e:03:b4:4c:59:f7:b0:
88:04:e0:82:20:dd:50:5c:39:d7:da:68:f2:15:62:5b:62:bd:
e5:65:e1:81:49:7b:be:8e:bf:d6:ca:22:c8:75:33:8b:97:89:
04:4c:81:e8:7d:16:3b:7b:36:34:8e:c0:80:91:77:fa:f4:3d:
97:27:53:34:e0:08:05:8c:5c:b5:d4:c7:02:a2:7a:a5:2c:81:
dd:0f:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:35 2025 by rpki-client