Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: j9zmZUvvwjTqHiCJY+6ifnpCzZz0kwobOtonOxZKHCY=
Subject key identifier: 8A:AC:06:5C:91:5F:D6:C1:EB:06:79:49:15:8E:D1:CC:3C:59:A5:04
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 019872CF3FA00B2A1DBF4477AB0650F845D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 0224
Signing time: Mon 04 Aug 2025 02:00:41 +0000
Manifest this update: Mon 04 Aug 2025 02:00:41 +0000
Manifest next update: Tue 05 Aug 2025 02:00:41 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: JJZxb2nS9JHuSq7Xa3DiuotF8R2xLWP/8E7qNsWQkP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3f:a0:0b:2a:1d:bf:44:77:ab:06:50:f8:45:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Aug 4 02:00:41 2025 GMT
Not After : Aug 5 02:00:41 2025 GMT
Subject: CN=8aac065c915fd6c1eb067949158ed1cc3c59a504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:63:94:8c:01:54:74:88:b6:e9:1f:4c:cf:
f5:14:c0:4d:c9:49:cd:cf:90:70:19:fb:22:e7:4a:
3b:fd:52:55:ee:a9:02:23:f0:47:0d:19:10:59:0d:
16:01:03:70:23:79:34:f9:28:87:e7:85:c7:0b:cc:
c5:c7:3b:4c:20:b6:8f:d9:36:ba:c0:e3:c5:86:55:
18:13:9f:10:11:a5:52:93:af:4c:41:db:b4:a3:80:
a9:e1:f0:e7:d2:4a:7c:36:6a:96:25:02:ac:76:f0:
2a:61:e1:ca:00:47:06:ff:97:ae:5d:60:3d:8e:f0:
23:9c:84:18:97:0c:01:35:53:b2:73:b4:b9:76:19:
6a:ba:7d:1b:20:47:99:08:5b:72:cf:51:74:d6:16:
d7:9c:7f:25:10:1d:54:0e:39:8d:db:a8:7b:fa:b3:
e4:28:71:27:d0:bc:98:4a:4d:4d:f0:b0:c9:2c:8d:
e0:e4:2e:2b:c1:35:ce:3e:aa:17:a8:2a:43:41:8f:
93:4e:eb:ab:e8:91:fa:ca:7d:d4:bd:47:75:1b:15:
12:68:44:a8:8b:d2:35:73:87:da:48:16:31:0e:a1:
61:6e:f5:d4:f7:fc:2c:67:f4:c8:ab:97:8d:46:7b:
43:37:e6:b4:06:b8:b1:90:d5:e2:fb:02:02:91:9c:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:06:5C:91:5F:D6:C1:EB:06:79:49:15:8E:D1:CC:3C:59:A5:04
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b0:b9:0f:2f:93:e1:18:70:ce:6f:25:35:67:45:37:4f:73:
2c:10:23:c7:26:96:29:d0:9a:e9:02:39:2e:81:38:46:9d:e8:
de:26:53:74:9e:f5:0c:69:17:c4:30:07:0f:2c:4c:fa:69:37:
b3:73:ae:7c:7c:56:9d:b0:76:53:35:88:5d:52:54:87:d7:ee:
1f:2e:c8:9b:9e:ae:75:10:55:d9:6a:07:06:af:a7:eb:f8:25:
10:bf:72:4e:b4:2b:0a:ec:5e:4b:33:c1:ea:83:25:54:e0:fc:
a4:8f:09:7a:93:a3:8e:ae:c1:ec:d5:24:82:af:ce:9d:96:f4:
cd:f0:31:ca:f5:16:cc:b1:9a:01:80:11:9f:bb:24:a2:6d:f6:
85:a6:3b:ff:f2:5f:64:21:75:69:20:de:33:32:53:a9:27:57:
e4:62:c6:c8:cc:46:a5:b7:9d:a0:13:29:a2:33:a1:48:8e:37:
94:ce:9f:f2:ca:98:ce:c9:45:2d:49:ae:e8:06:20:94:48:f1:
8f:d9:63:3f:39:fa:d1:88:45:cb:ea:cb:93:3e:e4:3f:f2:5d:
b3:27:0c:30:43:9b:d0:d9:50:03:62:3f:d8:cf:44:f8:40:6f:
ab:b0:64:4c:24:1c:24:0c:0c:a9:63:32:78:f0:f4:2d:19:35:
5a:a3:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:24 2025 by rpki-client