
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: Mrh8/nh+kGO+45E1jVIUX2zJWh8q+pQgUFjWypoF2r4=
Subject key identifier: 1F:F2:95:82:D0:39:54:BB:77:92:1B:60:F5:67:1E:AC:AA:16:8D:6A
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019881D52D728550BD5C3D3D8B45C3DB57C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 09CA
Signing time: Thu 07 Aug 2025 00:01:28 +0000
Manifest this update: Thu 07 Aug 2025 00:01:28 +0000
Manifest next update: Fri 08 Aug 2025 00:01:28 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: DxMAu9L9K2C2LBlq5sjYTjbOchVfbYg5GSi7oBZUtvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:2d:72:85:50:bd:5c:3d:3d:8b:45:c3:db:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Aug 7 00:01:28 2025 GMT
Not After : Aug 8 00:01:28 2025 GMT
Subject: CN=1ff29582d03954bb77921b60f5671eacaa168d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:3e:68:f1:ec:0a:4d:e0:7f:51:73:b9:09:
60:f6:33:d5:df:c4:7a:17:38:d5:7a:4c:e4:49:4c:
8c:d6:77:1b:70:24:36:fd:9c:a5:b5:b8:40:97:04:
b3:e3:c9:78:48:2b:36:80:97:f7:86:c8:d7:5d:67:
83:ca:52:ba:86:81:2c:2c:14:9a:57:af:e4:4e:d1:
42:88:e1:7a:3b:a6:a8:33:42:42:f0:89:41:52:46:
3b:56:b3:41:e4:0a:d4:b2:dc:b9:8c:7b:05:e3:03:
c3:99:bf:13:ca:e2:f6:49:e1:58:c4:d7:90:15:15:
56:8d:71:19:a6:59:47:78:c2:3a:56:97:0d:f3:93:
6d:f0:17:de:54:40:fc:cf:41:86:41:4b:85:c8:81:
f4:f9:bb:74:a6:af:99:ff:c6:f0:12:6c:57:24:52:
d8:a2:52:64:ed:ac:ae:79:fe:a8:dc:ce:e7:d4:0e:
b8:9a:5f:06:b0:92:7f:4c:08:0e:1a:5e:1d:16:33:
fb:06:36:c7:28:bd:dd:6f:23:41:0c:de:85:4b:9e:
2a:13:fb:93:9f:3f:51:e2:f6:6d:79:41:f5:e8:b4:
4f:39:49:db:0a:a9:96:c1:28:82:3b:eb:52:5e:c6:
70:de:ad:be:e1:2a:72:b3:ea:aa:4f:4b:fe:18:74:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:95:82:D0:39:54:BB:77:92:1B:60:F5:67:1E:AC:AA:16:8D:6A
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2b:c0:d3:b8:50:b2:86:ab:df:f2:d5:14:31:41:a6:9e:b9:
6e:e8:10:00:be:a4:91:f5:8c:49:68:96:8d:41:69:4f:a5:6a:
c3:d4:58:27:57:f6:17:ca:6e:3d:49:e6:54:fd:05:bb:8d:63:
0e:80:c8:9a:f0:09:27:98:8d:d7:b3:c7:5d:b5:0b:6c:8a:6d:
9a:ce:04:3e:8e:5e:7d:7b:e5:ae:74:a8:9a:e8:8d:9d:bb:d1:
b8:99:60:67:f1:de:cb:ee:66:f4:27:e6:36:07:44:0c:1f:c1:
dd:93:21:4f:63:21:f5:2e:f5:99:11:61:47:5d:81:b7:82:4c:
3a:19:8e:ab:52:ee:1b:4d:db:01:69:2d:38:19:4e:90:d6:22:
21:3f:7a:5e:d7:aa:94:90:12:48:ea:dc:ee:4b:03:f9:b7:5b:
eb:ab:f7:04:0f:bd:b1:79:7f:89:ae:ec:60:32:05:dd:ac:ad:
7b:a0:76:c8:7f:ae:db:fc:f5:7a:cd:b4:b9:c3:9c:30:a4:53:
5a:cc:6a:75:06:ec:60:65:9a:c0:bb:3d:70:bf:e1:16:fd:a4:
70:01:31:2a:60:fb:78:16:28:de:28:9f:35:a5:fb:49:c6:b5:
6c:b5:fb:92:7f:33:be:89:5a:e9:5d:2d:dc:7a:c8:b0:b6:e4:
90:38:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:49 2025 by rpki-client