Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: bVey071BzfIDgHJyWeXTAwZsA/Y2giaLltirAur2VqE=
Subject key identifier: 8A:DD:12:E1:B3:AB:F3:1E:A2:53:DB:19:D5:51:73:CF:54:18:59:D3
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019A4D3D3C318D18750CD3E8A6F58182CD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 145E
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: g94Zb0aaCGU1BuPKc7A8duWxsxU8In9k0T1VT81LYwA=)
2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3c:31:8d:18:75:0c:d3:e8:a6:f5:81:82:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=8add12e1b3abf31ea253db19d55173cf541859d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:b3:d4:43:1a:10:44:55:be:61:26:92:06:
3b:3c:ce:92:73:46:1a:a4:3b:39:93:ed:09:bd:48:
c5:62:50:67:07:ee:97:db:62:fd:b9:24:f6:8e:d7:
16:b0:b6:72:69:f6:b8:3d:fd:6f:c6:01:3e:5f:a0:
1f:36:6c:12:2e:c2:82:71:3e:5f:a0:cf:55:f8:05:
fe:ba:a9:1d:d5:7a:4b:57:11:52:ab:80:93:bd:00:
eb:42:7e:b1:b8:e0:28:e7:6b:3b:56:8b:54:dc:7d:
7c:b5:98:70:a6:5f:d7:9e:67:b6:ec:fc:09:73:f3:
df:c2:8b:93:7a:24:94:c7:0e:fd:25:b9:b3:c3:6a:
66:2e:f3:fb:70:08:7b:a2:fe:75:59:3e:ed:2f:52:
a3:13:eb:23:e4:98:68:b0:b1:37:4c:2d:29:64:bf:
36:ad:80:0c:e0:98:cf:ab:9e:53:1d:48:eb:1e:b9:
75:a3:50:c4:17:e6:04:3a:ba:af:2d:81:aa:6d:73:
fb:8b:c2:59:f9:01:63:9f:5d:f6:cd:0e:2e:4a:eb:
97:48:d9:7b:4c:08:37:1c:fe:78:f0:35:d8:8c:53:
57:e8:14:10:9e:98:39:d2:a9:e2:eb:bf:20:6a:01:
ca:c4:63:c2:fc:ab:2b:10:fb:bd:e6:72:32:73:65:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:12:E1:B3:AB:F3:1E:A2:53:DB:19:D5:51:73:CF:54:18:59:D3
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:18:66:ef:ef:f3:f7:48:83:ea:d2:e8:b5:e8:a9:a9:e8:
73:ec:7c:ce:3c:82:9b:39:bc:e4:80:c5:8b:9c:25:3a:e4:e6:
80:8b:35:bc:55:64:19:34:17:fc:04:d3:a5:b9:97:b4:cd:19:
1e:0a:6b:12:19:14:b5:74:c9:63:54:9f:b6:e3:ff:95:ee:1c:
7e:59:95:04:d2:dd:f2:f3:ec:9e:40:43:f9:8b:01:a6:bf:cd:
b0:05:f2:8e:d5:67:d3:70:e7:56:08:c0:98:de:42:7e:11:f7:
cb:4f:bc:a4:ae:5c:5e:fd:04:ea:0b:05:6f:97:8e:96:30:00:
3d:4a:33:37:cc:7c:96:1f:4d:00:b5:b1:c1:63:ae:7a:d6:2f:
b5:9d:b3:d2:2e:6a:fb:cc:d0:3b:8c:5c:38:a6:f6:01:ba:fe:
30:9b:c6:49:d7:4a:fe:b4:60:28:de:6e:ff:63:fd:58:71:54:
7c:bc:3c:67:3c:28:96:a1:9f:bc:13:ed:b9:c5:5b:7e:c0:23:
89:b6:b4:a1:09:40:29:90:8e:97:88:e6:d9:cb:29:cd:05:19:
4e:13:d6:51:6e:d7:e3:d3:1e:b3:3f:c9:e3:61:02:f9:69:91:
7a:04:ba:4e:ec:cd:26:7c:c8:3b:83:20:44:92:7c:8d:71:91:
19:c7:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:19 2025 by rpki-client