Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: 3csbl+7+y+k2B06PnwCKln/Q1fBf5RGsbyA7a5gRIvI=
Subject key identifier: 80:90:79:4E:F1:88:96:88:CE:C9:92:5A:46:D6:5D:AD:94:0D:32:6A
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 01987E659C882CED798EB4B750F06ED4A787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:00:44 +0000
Manifest this update: Wed 06 Aug 2025 08:00:44 +0000
Manifest next update: Thu 07 Aug 2025 08:00:44 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: CfZBU9S7zIY1xSel0D3Q7Jm7JGOibzdWAaQ0q0IFHHs=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:9c:88:2c:ed:79:8e:b4:b7:50:f0:6e:d4:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Aug 6 08:00:44 2025 GMT
Not After : Aug 7 08:00:44 2025 GMT
Subject: CN=8090794ef1889688cec9925a46d65dad940d326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:d7:74:51:b5:e8:ad:53:f1:35:3b:ab:4a:
fd:38:ad:19:d7:63:5c:e6:cb:3a:95:1f:df:ed:dd:
2e:3a:da:a1:47:cd:e7:1e:c9:ad:6b:56:e3:49:8a:
53:fe:e8:ab:41:6f:2c:9e:c1:35:8b:bd:70:5f:a3:
ab:b6:be:99:39:b2:a5:c9:46:3c:34:c5:b0:03:17:
f2:45:79:1c:e6:08:67:39:ed:5f:81:98:33:54:4d:
9f:74:ba:0b:a3:13:11:5c:1d:2f:9a:79:ba:3a:17:
56:df:91:0f:30:74:06:33:67:03:a0:fd:1c:19:af:
3e:4a:7a:55:2a:93:73:8d:a0:93:92:1e:4b:1c:4c:
68:25:b2:e2:3a:c2:d7:49:d5:ff:cc:60:d0:5d:9d:
9e:75:5c:37:24:58:4c:b2:61:e1:4b:e4:4f:90:51:
be:98:ee:0a:9c:88:09:1b:c5:5b:bb:d3:3a:b2:a2:
97:8e:70:30:19:0d:bb:99:96:9f:e9:01:dc:99:b8:
ae:da:44:b2:99:a7:ba:54:a9:0d:e5:2d:22:c1:83:
08:6b:57:33:ea:58:af:9c:9b:be:1a:c1:b7:e1:59:
df:d7:59:d0:9c:91:ad:bd:01:48:e8:c8:5f:04:bd:
84:54:1b:65:9b:6f:b3:be:7d:ad:cb:5f:04:41:fc:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:79:4E:F1:88:96:88:CE:C9:92:5A:46:D6:5D:AD:94:0D:32:6A
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:68:d2:8b:f3:f7:89:35:5b:a9:72:c0:e7:f0:1a:e7:13:f9:
19:17:ef:36:1b:f7:c2:1c:c6:8a:5b:37:fc:9a:4c:cc:59:d9:
89:c3:86:de:df:6b:f1:46:f6:06:da:63:6d:be:ce:1e:29:7b:
18:9f:0f:32:fe:f5:34:e0:c4:9d:15:e0:b2:72:5c:06:db:53:
44:d7:47:30:0d:34:7a:1b:78:0f:7f:8d:65:88:18:00:f5:6a:
3a:7d:af:b1:dd:6e:c7:1a:df:c1:08:81:67:9a:27:8f:56:dc:
e9:75:a0:3e:5f:7f:73:c9:cb:03:d3:31:b8:2f:d1:72:f2:97:
8b:77:68:24:05:ba:20:cb:26:00:64:9a:de:17:cb:5b:52:ef:
e2:a5:6d:5d:f5:f2:67:c7:8f:4b:59:9d:79:60:c1:8e:97:23:
c9:0e:dd:5a:b0:ec:8f:f3:4f:b0:f8:b7:26:18:50:24:d7:6f:
9c:c3:f4:08:7e:09:c4:3b:fa:8c:8b:f0:0e:aa:35:84:2d:a0:
53:2f:d4:ca:71:3f:2b:e3:91:0f:d6:06:73:ec:a2:42:c4:6e:
c7:91:97:a4:50:3d:b4:bd:be:ae:93:e9:07:f9:85:41:65:0a:
50:e2:ac:cc:c4:ea:6a:00:f5:de:94:d9:53:56:63:8a:85:e1:
68:f7:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:13 2025 by rpki-client