
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: Ws2igSBG5IbcWCjorJN9d6I1xql/JDcYc0ejZjkwfis=
Subject key identifier: 1A:C6:B1:86:66:E0:27:23:AD:DC:C8:3B:57:69:37:A0:53:E2:35:9E
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 01987D1C62BECA5F7B8A8DCD484D840E5D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:08 +0000
Manifest this update: Wed 06 Aug 2025 02:01:08 +0000
Manifest next update: Thu 07 Aug 2025 02:01:08 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: KPbKmqXUQHiAGfbOqfOR951zGGh+ph4BCrA92/Evj2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:62:be:ca:5f:7b:8a:8d:cd:48:4d:84:0e:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Aug 6 02:01:08 2025 GMT
Not After : Aug 7 02:01:08 2025 GMT
Subject: CN=1ac6b18666e02723addcc83b576937a053e2359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:91:fc:d0:19:29:9e:7e:fd:d2:32:4d:c3:
11:f0:01:83:d0:2b:bd:e3:b6:4f:b3:57:43:e4:c1:
e3:bb:00:4d:3c:e5:e1:37:d6:1f:99:a0:5c:51:06:
cf:e9:d6:54:a2:fe:f7:67:32:ac:02:c1:46:90:ae:
eb:f6:ab:b6:d5:13:e4:bd:4f:35:31:d9:2a:b0:05:
d2:26:61:fd:7d:52:be:e1:97:aa:d7:dd:68:73:50:
c7:02:ff:2f:a3:83:a3:a8:78:c0:00:8a:31:b0:0f:
6f:8b:6e:b1:3d:5f:23:8b:a7:b9:0e:ef:26:31:85:
46:86:cf:6c:aa:9b:b3:cc:74:bf:8b:e8:89:99:f4:
cf:c2:b8:76:0b:09:04:c3:1c:0f:5a:bb:ba:5e:1f:
4f:b4:96:56:34:52:d3:b7:c3:61:ff:67:11:30:5f:
78:37:65:e7:ac:33:79:5c:26:9e:de:27:7b:1c:9a:
ac:9c:7b:c3:68:82:40:98:ef:67:1b:8b:bd:e1:f7:
5b:fc:27:b2:a6:b3:df:a6:e8:81:56:6b:9c:20:4a:
4a:08:1b:1a:be:c9:37:46:a9:d1:d7:10:ba:af:9f:
79:bb:aa:ce:9b:02:b8:10:96:49:a6:8c:d5:d6:1e:
da:08:2b:75:6c:9f:d0:5e:ed:e7:20:05:9d:46:35:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:B1:86:66:E0:27:23:AD:DC:C8:3B:57:69:37:A0:53:E2:35:9E
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a0:62:da:0f:ad:ea:b0:0a:fc:02:10:49:30:5d:17:cf:32:
08:0f:fb:78:72:b7:f5:c4:b8:65:ef:7d:7e:d0:f8:63:06:84:
88:b5:d1:91:0a:60:38:a1:a6:54:43:b9:07:32:5b:fe:a4:22:
1e:17:e0:e6:8e:a2:9f:a7:34:a0:0c:68:35:93:48:59:bd:03:
ae:17:9c:e1:63:e7:54:d6:74:21:0a:ac:1b:f4:0e:bb:2a:f5:
a6:85:7d:bb:ad:a1:40:fe:82:f1:89:6b:1b:1a:ea:78:06:45:
58:5f:22:0b:34:17:c0:47:97:b3:43:45:79:4f:7f:26:04:7d:
e9:94:f0:77:8d:a4:09:68:46:e3:0c:84:5c:ba:2e:8b:a1:5a:
39:a7:a1:4c:a5:f2:be:8b:d4:21:c1:88:af:c3:70:3c:37:7e:
25:74:21:fc:15:2e:b5:7f:17:15:67:66:a4:5c:32:bc:6e:3e:
96:6b:28:a6:d7:a8:ea:d9:c2:71:3d:59:7d:3f:56:22:af:6f:
0d:18:ab:5a:eb:88:73:a3:f3:43:e2:2a:dc:b1:0e:01:45:66:
0a:8c:7e:a5:14:ff:6d:06:9f:08:be:90:b8:ae:40:c2:87:80:
34:27:1f:07:ae:2a:23:03:53:6c:de:12:05:b8:fe:df:68:35:
47:ac:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:26 2025 by rpki-client