Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: HL/VeBNB+YYEJAR6MnFhJva2LJHf15Bf3FpM47r9VQ4=
Subject key identifier: 1F:11:0E:5C:A6:D1:87:62:F7:A5:03:F6:D7:A4:B5:88:3F:83:91:F2
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019887692A631D91D8B8A299D70DA00B183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 02:01:12 +0000
Manifest this update: Fri 08 Aug 2025 02:01:12 +0000
Manifest next update: Sat 09 Aug 2025 02:01:12 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: 44XWl5FVe3V02vju/bURdevO31T3gzJGR3g5wlF69Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:69:2a:63:1d:91:d8:b8:a2:99:d7:0d:a0:0b:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Aug 8 02:01:12 2025 GMT
Not After : Aug 9 02:01:12 2025 GMT
Subject: CN=1f110e5ca6d18762f7a503f6d7a4b5883f8391f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:bc:8c:2a:ea:9c:83:15:cf:14:05:3c:e4:
2f:10:76:a5:12:c5:6a:42:af:aa:e2:ab:f2:19:59:
54:dc:ac:bb:3b:60:72:88:02:2b:47:59:9a:b9:75:
ab:b4:a4:7a:8f:d9:50:bf:af:66:eb:6f:f9:d2:e1:
64:88:a4:b9:72:d8:69:db:75:4f:6d:92:5f:7d:2c:
1c:62:9b:94:28:74:e7:08:44:aa:a5:8d:03:51:7c:
d1:a7:b2:0e:f7:19:2e:7f:73:52:6e:18:3f:7d:b4:
61:e4:32:c1:06:f3:22:d2:d6:dc:7d:95:d1:4f:e9:
2e:79:b8:e2:b0:95:9b:56:c1:4f:56:03:4b:fd:cc:
06:6c:b0:19:1d:f5:f2:f6:e5:03:ed:8b:1b:7a:e6:
23:cc:87:97:6c:13:03:af:95:f8:73:f1:4a:ad:39:
35:56:17:a3:f3:91:8e:3a:db:d3:6f:13:56:f0:b3:
aa:70:c5:04:fe:24:55:25:37:2a:ec:dc:80:dc:e9:
06:e3:28:c4:4d:ee:d4:b0:23:14:45:2f:76:67:53:
46:b3:7d:f3:22:1a:c2:c6:1a:61:bd:0c:36:14:24:
6f:df:f6:53:55:41:17:bf:5b:4c:19:48:43:47:41:
14:32:b3:a5:77:9f:d0:11:e4:4c:a8:31:73:52:1e:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:0E:5C:A6:D1:87:62:F7:A5:03:F6:D7:A4:B5:88:3F:83:91:F2
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:65:59:e7:36:da:ee:85:1c:02:64:36:c5:b8:93:d7:63:
4e:83:a2:55:e6:83:cb:40:6f:c0:f0:ba:78:33:c2:b3:29:c4:
c9:08:01:91:9e:a6:18:06:91:20:2a:56:3b:eb:d8:6b:28:d0:
09:03:74:08:10:62:1b:96:56:4f:42:f9:3e:30:1b:46:ba:1b:
a4:73:7c:4b:a8:a3:27:ed:e6:d9:c3:45:9e:e3:2f:aa:8a:e6:
40:ee:18:87:f6:73:5a:3e:c2:83:f6:ec:1d:d7:92:32:a1:c5:
af:da:99:6b:9f:e7:ac:cc:b5:c1:34:50:3b:0e:e6:5a:a4:4c:
d8:37:35:73:17:a6:e1:ce:e7:87:7f:3f:aa:cf:3f:6d:59:dc:
d3:55:3d:64:b8:17:03:1b:9b:23:f3:43:27:11:92:40:73:69:
f0:5e:d2:ea:4c:2f:2c:16:6d:09:e0:f1:e9:02:a7:92:e7:47:
73:ff:7a:59:0c:f2:37:55:f5:ce:de:96:19:28:f7:26:ff:d9:
b7:48:2c:e0:ce:b7:0c:2b:d5:23:0c:a7:50:bc:a2:44:0f:84:
7d:4d:b3:73:32:a4:30:33:9a:df:0a:e7:1b:8c:9a:39:92:e2:
8e:c0:85:2d:e0:b3:e0:21:91:b2:d9:fb:a5:bd:26:d9:25:8f:
25:29:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:33 2025 by rpki-client