Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: x5dOk73NSf9ARMeSk3vnF38eX6tkWkxsJcI1xVzTFDM=
Subject key identifier: 2A:B7:F9:A9:2A:A0:6F:2F:4B:48:8B:05:AE:76:98:92:44:6D:56:69
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 01989637435FABA444E244F6CA13A827FEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 146E
Signing time: Sun 10 Aug 2025 23:01:00 +0000
Manifest this update: Sun 10 Aug 2025 23:01:00 +0000
Manifest next update: Mon 11 Aug 2025 23:01:00 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: wtdDkg8hsf4RSt5z/yF3Y7NQAetV4xLAOlucqbGrZps=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:43:5f:ab:a4:44:e2:44:f6:ca:13:a8:27:fe:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Aug 10 23:01:00 2025 GMT
Not After : Aug 11 23:01:00 2025 GMT
Subject: CN=2ab7f9a92aa06f2f4b488b05ae769892446d5669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:97:76:9b:11:52:4a:e4:e3:e8:23:b2:17:
e6:cb:d1:30:7f:af:7e:02:91:66:4c:d3:20:01:c1:
6d:64:dc:bf:2b:f6:50:10:fd:d9:5c:60:94:4d:11:
02:68:4a:ab:81:05:9b:d5:5e:78:bc:a6:32:b2:cb:
9c:4f:af:06:73:71:90:51:b2:b8:aa:c3:43:fd:e1:
cb:41:00:42:96:dd:d2:f4:1d:77:63:19:f4:4d:7f:
52:35:e7:83:e2:54:0c:25:45:f1:ca:da:7d:47:a3:
9b:af:65:60:99:74:8e:37:dc:f4:a6:22:3a:f0:03:
a3:b7:cc:40:47:65:b2:1e:0b:82:e3:e1:ce:96:e4:
60:9a:b8:bc:30:97:42:09:26:40:5a:01:20:ea:42:
86:e1:52:34:76:f0:a5:6c:e6:ad:0a:81:d7:f2:89:
c1:c7:ca:17:cf:1a:a0:d5:46:d0:85:bf:d3:04:39:
8f:fb:d9:66:98:ca:02:23:de:2e:31:0c:ae:15:5e:
78:cd:77:1b:d9:97:fa:cc:70:10:01:45:18:aa:16:
67:b2:59:52:f6:88:ee:8d:ee:a3:a1:4f:18:8e:38:
62:95:68:d5:67:b6:a5:80:d8:f7:c9:f7:a7:cc:de:
d8:c3:06:43:44:91:84:b6:cb:65:fa:de:fd:74:e6:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:F9:A9:2A:A0:6F:2F:4B:48:8B:05:AE:76:98:92:44:6D:56:69
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a9:ad:b4:9f:99:a2:96:cc:93:d5:87:5a:00:ba:ad:b2:e1:
fa:c0:e6:59:22:07:2a:59:41:9a:90:d1:fd:fb:62:25:19:90:
6a:bc:ff:39:39:04:fe:10:f7:02:11:34:40:96:0c:32:16:68:
78:6f:94:40:65:ab:65:c3:2b:1a:ec:9b:e7:47:20:a0:8b:86:
dd:c6:ce:6e:d9:26:14:a0:49:1a:bf:10:36:41:fd:c6:57:14:
17:30:dd:86:46:a8:de:2e:bf:df:5e:7c:f4:8d:a0:a1:70:b5:
35:5f:07:d6:5d:45:f8:56:3e:86:a2:b7:37:de:45:ce:28:67:
a4:3d:8b:3b:d4:bc:1d:51:2e:9c:4c:16:fd:f6:1a:cf:c9:f3:
d7:31:cb:57:8e:29:23:01:f9:20:88:c9:cf:e8:0b:16:ea:06:
2b:61:ef:24:67:94:9c:48:13:61:61:5d:5e:28:b7:b5:f6:f4:
39:ec:03:80:18:09:54:72:24:bd:41:f5:82:4b:5f:ad:5f:68:
a0:21:08:3a:f6:e7:b9:7f:45:b2:e1:ab:20:39:5c:92:ea:e3:
88:55:bd:7d:7d:02:a3:71:fe:d5:f5:e4:62:07:8d:2f:8e:ee:
ba:f5:59:e3:b7:e4:04:58:66:ce:0a:26:37:6d:1a:5a:d4:59:
7b:e1:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:18 2025 by rpki-client