Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: t8UUVdD88wEo13QpVt+T5PouCXbg+WwsQe5dC2C/z8M=
Subject key identifier: A5:41:76:AF:8C:96:33:9E:B1:C7:BC:92:FC:21:C4:04:0D:84:A3:37
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 019873E2AE25737D15458F629FCD99A97FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 109F
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: 5P0dpgBoBBo25K3F2YDrjjpbkJSQWlieMDtWYrFQP+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ae:25:73:7d:15:45:8f:62:9f:cd:99:a9:7f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=a54176af8c96339eb1c7bc92fc21c4040d84a337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:71:26:8f:25:e8:7f:67:2b:e4:6e:ff:04:
77:79:53:62:43:00:05:f2:33:d3:01:d5:82:63:33:
20:20:f6:61:82:df:19:a1:8e:f3:e1:61:33:a9:df:
c0:04:a0:5d:93:88:0a:36:a9:bd:22:a0:08:23:6b:
e9:b6:2d:b0:1a:d8:49:1d:de:c7:85:67:c9:74:c2:
56:95:0e:1f:54:a8:f9:9b:30:b8:43:4d:3c:67:66:
16:f6:24:af:ee:5c:b4:d4:71:b5:9a:92:ce:9f:2f:
31:dc:32:e3:a2:74:fc:ac:fa:6e:4e:b2:cb:f3:f3:
c8:5e:04:81:ef:4b:5c:5f:19:19:57:27:33:32:cd:
cc:e0:80:34:a9:02:da:a2:09:0d:01:48:a6:8c:59:
46:91:8b:9b:87:12:40:3f:19:ea:8e:76:ef:fa:1b:
1b:f2:e3:6b:a0:f4:38:84:f0:62:09:dd:9f:b0:24:
c4:13:4d:c3:22:85:f2:34:be:36:6c:94:b7:ce:17:
11:d3:7f:fc:b3:90:8f:b2:1f:ea:25:f0:cf:12:bc:
0e:2a:12:45:56:72:9c:06:87:d2:a5:bf:a9:48:14:
75:57:65:9e:fe:7b:bb:fc:5e:56:ef:05:b3:b9:2b:
31:ad:41:60:36:29:a8:f9:da:01:fa:d5:5e:15:74:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:76:AF:8C:96:33:9E:B1:C7:BC:92:FC:21:C4:04:0D:84:A3:37
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:70:4a:d1:a5:49:e3:fd:8d:7b:a1:1a:05:3f:f3:6d:a9:0f:
d5:ac:cf:76:b8:7b:0a:0b:ac:4b:8e:47:8c:eb:df:f3:05:4d:
e5:1c:b6:45:54:8f:6d:93:20:b1:94:38:60:f4:6a:60:b5:1b:
ff:88:12:5f:90:ba:49:41:3a:db:03:2a:1a:9e:6a:b6:3d:bf:
70:f6:08:ee:4f:27:ba:64:83:31:da:e4:44:a3:7e:5f:bb:59:
1b:cd:04:13:d1:ce:f5:b8:71:f9:5b:df:25:f8:20:43:05:1e:
7f:70:4b:b9:c0:42:16:0c:df:eb:35:e3:2b:c5:c8:d6:6f:93:
89:58:48:34:30:fb:b4:46:6b:6a:6c:ec:92:62:52:4f:a2:8a:
6f:49:bf:ca:ff:47:64:5a:21:27:50:94:6e:c0:dd:93:d2:4b:
ae:40:bf:1e:90:15:72:a9:5a:8b:b5:f7:93:47:49:db:01:64:
46:81:2c:a8:d6:db:98:2a:06:39:ab:e4:41:df:2e:b9:90:5e:
ff:1a:97:59:a7:30:42:03:55:5c:39:dc:09:e7:d1:93:af:5a:
a0:6f:f7:c4:c4:6f:b2:f1:9f:db:cb:4b:40:0e:7b:80:6f:ab:
a3:19:78:b8:9d:59:b5:2a:00:46:01:93:07:60:41:85:69:46:
67:82:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:58 2025 by rpki-client