Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: kEfs5/mIqjI1BLg6GinmU5Rbp1+5gLEZvLmfVr8vDV0=
Subject key identifier: FB:94:F9:D3:C3:DF:49:1E:6C:5F:D5:04:54:B9:8C:7C:E7:38:B3:B3
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 0198808B896002773A734C466FF2082C2E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 11A0
Signing time: Wed 06 Aug 2025 18:01:24 +0000
Manifest this update: Wed 06 Aug 2025 18:01:24 +0000
Manifest next update: Thu 07 Aug 2025 18:01:24 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: UhgI6aQWYefIe6Whu5+a6unCRNmyKyeoSJkzVAt/u7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:89:60:02:77:3a:73:4c:46:6f:f2:08:2c:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Aug 6 18:01:24 2025 GMT
Not After : Aug 7 18:01:24 2025 GMT
Subject: CN=fb94f9d3c3df491e6c5fd50454b98c7ce738b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:ab:0f:cd:5c:d8:d2:ad:f2:2d:7c:95:48:
d9:41:40:6d:08:05:f4:ea:a7:53:fc:05:05:1a:58:
8d:41:eb:18:cd:91:ef:15:f8:50:fc:44:7b:c5:bc:
d4:71:e1:0c:a1:89:b0:f9:78:3b:c2:c6:c8:68:32:
da:bd:13:c7:2b:db:32:03:8c:22:cf:76:8e:2a:5e:
8f:2b:14:44:88:40:9e:ec:3f:c5:6d:e1:97:41:31:
cd:93:92:8e:a2:4b:d8:b4:16:2e:52:d9:47:b4:9f:
4d:27:ee:b8:87:33:25:c3:b5:6a:c4:88:96:de:18:
eb:71:0f:9a:15:d9:0f:f1:e5:53:79:a2:c9:9a:47:
18:2e:73:86:a7:af:8e:d3:6f:38:56:31:87:7c:3f:
98:9d:c8:70:f7:16:b0:5c:8f:65:5a:a5:aa:d6:8e:
07:f2:a6:88:e8:a5:15:a5:76:cd:3e:72:b7:43:34:
3c:d1:4d:99:4e:e2:be:40:41:fe:67:1a:b6:18:d7:
8a:b2:11:d9:cf:f0:ad:58:01:b1:35:fe:fa:c3:0d:
ab:4c:32:f9:bd:1d:ae:39:67:dc:7d:77:0a:cc:ff:
71:3d:75:91:bf:8d:65:11:b7:eb:62:0b:ed:fc:fa:
a1:44:1f:ec:5d:ef:48:23:44:5f:c5:85:d8:c6:51:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:F9:D3:C3:DF:49:1E:6C:5F:D5:04:54:B9:8C:7C:E7:38:B3:B3
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5e:7b:1f:aa:b4:2f:d5:b0:d7:75:4e:6a:48:1b:84:3d:69:
81:e7:12:ad:73:8b:c8:70:3d:3a:3b:f2:93:76:79:70:82:5c:
56:6f:df:a1:b6:19:53:2a:21:15:99:7b:f4:aa:5b:d2:2f:bd:
4e:dc:10:d4:fe:7c:a5:eb:cd:9b:44:e8:c3:d0:ef:5c:01:40:
6c:55:af:28:59:e8:d1:85:6e:ac:7d:f4:84:2c:ec:56:a8:71:
77:7c:83:64:ed:cb:d5:71:c3:ff:41:67:67:4f:fa:67:ec:3b:
62:4f:3e:50:6c:ae:3f:b8:1e:20:d3:78:e0:50:ce:63:61:70:
1d:8d:57:00:e3:f2:c0:ee:0c:77:90:01:f7:e2:cc:a2:b1:0d:
34:57:97:c3:b7:76:1a:e1:3c:18:91:87:5e:b1:37:36:c3:8c:
90:92:1f:18:02:ed:f9:a8:92:95:ba:b1:66:99:fc:89:8a:7a:
53:ff:40:89:8a:ab:de:f7:68:96:93:96:66:c9:4b:12:c1:c5:
82:78:0d:5c:ca:08:b8:f0:ad:2c:eb:27:30:ca:78:8c:0f:ef:
69:be:28:1a:52:f2:6e:01:b0:95:31:d7:81:14:56:38:6d:06:
6a:6b:09:f7:f8:8d:8a:7d:dc:ba:a5:cf:ab:b7:de:c6:ac:32:
ca:7e:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:53:34 2025 by rpki-client