Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: jqd1orKfdMEmWl6sy8+qYMaPcWwnwv/EGuWPYjweSG8=
Subject key identifier: C3:5B:EC:08:E4:29:80:C7:B2:37:4B:DD:23:67:D3:22:4B:1A:2C:A0
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 01989E5F249C5AB1F5C7F1E32DC03C6BDB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 05E8
Signing time: Tue 12 Aug 2025 13:01:31 +0000
Manifest this update: Tue 12 Aug 2025 13:01:31 +0000
Manifest next update: Wed 13 Aug 2025 13:01:31 +0000
Files and hashes: 1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=)
2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: 1aISkJViaawaqsOuqpxpJOxvE3lfjqUPudUrOaVNvTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:24:9c:5a:b1:f5:c7:f1:e3:2d:c0:3c:6b:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Aug 12 13:01:31 2025 GMT
Not After : Aug 13 13:01:31 2025 GMT
Subject: CN=c35bec08e42980c7b2374bdd2367d3224b1a2ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:c3:80:3a:a8:3c:e1:09:ac:89:30:ad:82:
9e:46:26:55:9f:27:9b:fc:4b:8e:16:82:68:74:1e:
9a:ce:63:f2:bb:24:a7:a8:1a:fa:87:08:39:60:33:
e8:4d:5c:25:77:2d:ff:f5:75:ff:50:88:0e:3d:a0:
d0:69:fc:a3:22:9a:fe:97:d2:8b:5a:c2:b5:7b:06:
3e:79:e2:02:4b:2f:aa:ac:78:ea:1b:cf:e7:35:62:
4f:a2:c3:4c:7b:e0:63:90:0a:df:00:e1:f6:64:48:
20:d7:01:cb:69:85:b2:be:16:97:91:6a:65:86:ab:
d6:ae:d7:dd:5d:44:83:e8:8f:8e:6f:72:15:2c:64:
82:cb:69:dc:99:60:81:92:05:79:ff:ab:0b:74:4b:
82:14:f1:b8:b8:77:57:2c:16:a3:88:19:1f:ea:90:
29:c2:81:2e:17:e0:30:d2:79:60:38:57:a0:e5:1d:
c5:07:0d:4c:12:88:a8:cf:d5:32:4a:a5:8b:26:0d:
6d:f1:aa:d1:15:0c:9f:71:d8:47:7b:13:f6:fd:6c:
fd:01:d3:b6:48:88:9d:89:12:4c:bd:52:ae:97:f7:
cc:83:05:3f:8d:14:97:a8:3e:bc:d9:f0:b9:6a:91:
9e:c6:17:59:4f:ac:e9:11:6b:0e:6c:e7:30:37:3c:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:EC:08:E4:29:80:C7:B2:37:4B:DD:23:67:D3:22:4B:1A:2C:A0
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:8d:a7:c2:00:77:cc:f3:59:d7:03:27:16:b2:7d:ae:c7:
0f:70:1f:a7:92:47:9f:5a:11:b4:1e:ee:88:fc:80:20:78:26:
27:65:d6:35:b0:e2:7d:77:f9:a4:78:f9:a4:76:87:9d:66:5f:
5d:f0:c9:95:d0:97:6f:e1:a6:7a:ef:40:bc:39:e2:65:49:79:
62:94:a7:ce:da:c3:2d:68:20:93:7e:fc:30:2c:e8:e6:f8:b4:
3c:da:ec:6b:ea:5a:9d:3d:fd:fe:b4:31:35:82:cb:cf:20:ce:
b0:05:7f:47:75:f4:1f:38:e1:a0:11:9a:b5:d5:53:58:5e:2f:
6f:2b:02:5c:b4:ad:40:3b:08:34:3c:0b:27:7d:7b:b9:b0:88:
83:9e:18:23:75:52:ad:b8:e6:f7:e4:ab:10:57:28:f2:a6:2d:
dc:31:e5:a5:1c:53:0e:b1:de:9a:f0:3b:8f:3f:1b:0f:1e:11:
0f:50:48:c0:9a:ca:5f:a7:f5:73:ca:4b:fd:3a:aa:eb:b8:ed:
5f:7c:32:44:26:f7:05:ab:9b:a8:cb:42:36:80:17:d2:8a:2e:
d9:41:1d:9f:9d:9f:70:1f:15:f0:35:38:59:f0:85:41:82:52:
5f:41:d0:21:d0:03:3b:a7:be:45:6a:be:80:0b:30:26:98:7b:
b6:e4:04:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:46:13 2025 by rpki-client