Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: /JpfzoPTVllkqaUdD6lqtgPq4qzursYtlU0Ig4GAiAc=
Subject key identifier: F8:25:D9:B8:13:35:71:99:65:74:D6:AF:F8:8D:4A:78:AF:38:D2:A2
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 0198978064C7CBB1355AFD4817314928473E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 0119
Signing time: Mon 11 Aug 2025 05:00:30 +0000
Manifest this update: Mon 11 Aug 2025 05:00:30 +0000
Manifest next update: Tue 12 Aug 2025 05:00:30 +0000
Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: pEjNizvXXDTCxOBU6Deq3kl9dlUPXxPRYZ3wLIWw3KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:64:c7:cb:b1:35:5a:fd:48:17:31:49:28:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Aug 11 05:00:30 2025 GMT
Not After : Aug 12 05:00:30 2025 GMT
Subject: CN=f825d9b8133571996574d6aff88d4a78af38d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cb:96:c5:da:a0:b5:db:57:00:cd:cd:64:b4:
96:2e:16:5b:f0:f9:89:00:3c:fb:f5:93:06:b6:40:
86:5e:84:b2:73:26:1c:e4:15:83:a9:d6:eb:31:b9:
59:56:6d:5f:67:0e:12:7e:6f:a4:e0:a1:09:27:db:
54:d2:fa:e5:2b:b2:af:e5:21:03:ac:f9:21:e2:7a:
c9:7b:55:89:0a:ca:91:1d:a1:f4:36:5e:1e:c4:b5:
c2:59:3c:4a:b8:98:b7:39:6d:9a:13:17:87:05:5c:
f0:ee:5a:fa:2b:75:54:a9:ca:7f:5e:09:d4:56:aa:
69:cb:3d:ba:b8:b3:b7:c7:c0:1c:82:f2:11:ac:2a:
65:9d:13:b0:c2:ea:a8:c6:5c:af:53:0d:6c:49:b6:
c3:98:b3:b5:83:4e:47:1b:42:be:cd:f4:bb:f3:96:
9d:ad:cb:61:05:76:de:92:9c:15:38:05:98:ba:36:
bc:29:dd:e4:b1:bd:56:1b:b0:02:77:af:5b:b1:f7:
50:17:59:36:2e:7c:67:76:07:44:3e:36:35:6f:47:
4e:31:69:97:40:95:49:be:e4:20:7d:6c:0e:06:f2:
6e:0f:e0:91:e2:fd:ca:44:f5:b7:91:80:fb:29:59:
c4:8c:f3:02:ce:c9:79:59:79:16:ea:cf:de:34:81:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:D9:B8:13:35:71:99:65:74:D6:AF:F8:8D:4A:78:AF:38:D2:A2
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:39:8f:5a:ea:d2:fb:1b:4f:03:f3:06:f7:f8:ee:a9:89:
78:31:33:72:c3:65:6f:5d:74:41:1e:36:83:9b:6d:1c:18:a5:
99:3b:d3:95:76:6e:97:92:a7:3a:87:f7:c0:bb:0d:79:4e:e6:
d0:17:a1:a0:44:c2:9d:27:6a:03:a9:d2:72:80:8d:30:d6:9c:
ec:2a:cb:61:6d:a4:08:38:75:67:bb:30:27:09:48:e9:97:90:
36:30:09:a6:7f:4d:b0:3c:5f:02:6a:b0:38:17:8f:0f:f9:ac:
56:6e:08:bd:38:d7:e9:aa:47:a2:b3:67:e6:e4:a7:3f:76:ef:
e1:7e:4e:b3:79:a4:8f:07:df:49:b3:12:4e:dc:51:df:fa:b1:
10:bd:82:f3:ab:79:80:59:57:ed:56:b3:79:06:79:52:87:2d:
77:bc:58:64:af:83:7e:d4:d7:c2:fa:eb:06:22:f7:73:33:c2:
41:68:55:79:6b:57:c4:53:8b:91:79:d5:fb:9b:cf:0c:dc:bc:
48:c3:58:8e:ae:9b:a3:30:85:8a:6b:59:3d:c9:44:8d:38:0f:
ac:74:e6:9a:51:1a:c5:63:5c:a8:ee:d8:3f:bc:50:62:b6:9a:
f1:80:99:a3:c0:66:00:4f:1d:37:7b:d7:60:8f:a5:c9:dc:71:
35:fa:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:30 2025 by rpki-client