Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json)
Hash identifier: LwTPaiPqCxqYy0s3cCheWnvExQw4SL8xrTQdr+95sYw=
Subject key identifier: 6C:99:85:E7:05:71:92:5F:01:DC:04:43:A5:05:D5:67:37:7E:B2:FD
Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Certificate serial: 019896DC62B7E91B6C2C94BEA5F7370008A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
Manifest number: 137B
Signing time: Mon 11 Aug 2025 02:01:22 +0000
Manifest this update: Mon 11 Aug 2025 02:01:22 +0000
Manifest next update: Tue 12 Aug 2025 02:01:22 +0000
Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: oho3irobfbF/9oJ94u1HibKy3YlP0jPZLhTFpmfylR0=)
2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:62:b7:e9:1b:6c:2c:94:be:a5:f7:37:00:08:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104
Validity
Not Before: Aug 11 02:01:22 2025 GMT
Not After : Aug 12 02:01:22 2025 GMT
Subject: CN=6c9985e70571925f01dc0443a505d567377eb2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:e0:45:a4:bc:29:7b:28:fc:8a:dd:3d:e5:
45:31:a9:82:90:8a:b2:04:45:0b:70:7c:2f:21:b8:
00:a9:2c:f5:4e:3f:11:8d:99:6e:2a:34:21:78:f8:
2e:73:80:01:6b:c8:5c:fa:06:d2:b0:1a:0b:8b:e2:
00:aa:ab:6d:68:fb:48:94:60:d4:2e:38:3b:2d:e4:
50:4c:63:f1:78:4f:88:f3:b3:98:81:0d:de:4d:b6:
77:f4:d2:03:cd:b6:bf:5d:f9:7b:27:fc:40:a7:f2:
93:b4:e9:3a:96:6b:16:15:8a:84:e9:48:55:7f:a9:
aa:ab:19:1c:90:e0:0c:d5:b5:92:03:02:32:88:09:
19:d1:17:85:da:b8:89:8e:95:e9:e3:a5:c3:e0:6b:
a3:67:18:c8:b9:5f:37:7f:e3:58:97:ed:a4:d4:35:
f1:6a:d8:c0:e3:07:15:ca:a6:cc:37:f3:f9:60:49:
ba:79:0f:ce:66:8e:38:ce:01:b3:58:10:c6:4c:4d:
51:ce:ab:69:a4:56:e6:3d:93:75:b1:aa:e3:fe:77:
45:92:f5:91:d1:0f:9d:63:71:6e:31:10:90:68:64:
dc:76:f9:b9:16:59:7b:30:c8:f9:28:56:03:17:fc:
5d:85:fb:39:eb:30:b2:5f:b5:87:8d:8a:d8:3a:e6:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:99:85:E7:05:71:92:5F:01:DC:04:43:A5:05:D5:67:37:7E:B2:FD
X509v3 Authority Key Identifier:
keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:3c:99:da:62:67:fd:29:e7:36:95:5e:c9:2f:9f:e9:6a:
96:d7:0b:bf:5b:bf:99:fa:32:c5:f7:16:e5:b7:dd:8d:e3:ac:
6a:5c:a3:fe:7c:71:6a:e7:56:8b:b8:fc:e9:c2:53:23:10:b1:
87:95:70:f9:3a:60:cd:57:dc:ec:d6:02:67:4f:50:36:71:9d:
f7:ea:ea:12:73:38:8b:15:e3:c5:1b:ff:7a:30:1d:d0:51:d1:
b3:c6:ab:f7:9e:11:0f:00:c4:6f:0f:aa:b6:34:a4:d2:db:99:
c6:a2:94:fb:19:05:17:a7:c3:7a:30:3d:3d:bb:a8:df:bd:f3:
97:14:c8:8d:fa:8f:d3:90:99:16:b3:35:01:12:0d:8c:bc:5b:
5c:8e:b6:10:82:6f:93:f3:ec:84:f7:d3:a6:6d:39:cf:4e:38:
03:30:25:58:f1:b7:67:13:5f:ba:49:83:51:5a:e6:5f:ff:e2:
9a:13:e9:35:25:9b:15:48:5a:30:03:84:27:35:09:f5:f2:32:
5f:99:51:ad:a1:7c:bb:0e:9c:4b:af:d8:c0:63:b6:88:a0:d8:
12:da:f6:c2:c2:55:df:d6:d1:47:39:ae:a6:d1:33:71:ae:c9:
e7:ba:07:20:ef:b9:fa:e7:cf:0f:af:20:a4:68:12:a5:b7:15:
3e:5f:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:12 2025 by rpki-client