Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: ki4pzbyazGKLl9MRm6xefMK6MHhRW5lme5p576KDrjc=
Subject key identifier: 51:AE:E1:D4:55:3E:A1:87:F6:81:59:B4:3C:C8:4E:F9:33:AE:5C:02
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0198819DF9E31135599ADC74FF4A82C05397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 0FF1
Signing time: Wed 06 Aug 2025 23:01:10 +0000
Manifest this update: Wed 06 Aug 2025 23:01:10 +0000
Manifest next update: Thu 07 Aug 2025 23:01:10 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: F4XA9ILSPkZ16xyV2gR/x4MjAf7hZId5zn7jeThXymc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:f9:e3:11:35:59:9a:dc:74:ff:4a:82:c0:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Aug 6 23:01:10 2025 GMT
Not After : Aug 7 23:01:10 2025 GMT
Subject: CN=51aee1d4553ea187f68159b43cc84ef933ae5c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:9a:8b:9f:98:0b:4b:88:7f:f1:b5:c6:8e:
e7:38:fa:c6:8b:df:6c:12:92:aa:b0:74:2e:14:1a:
ab:48:c0:61:7e:e2:c0:bf:7f:aa:35:51:b0:2c:44:
39:d2:72:a2:1f:7a:81:e4:2d:47:2d:fd:1d:39:c6:
85:ed:df:a0:76:e1:5e:32:28:2d:c5:18:9c:a6:6b:
77:b9:e0:a9:35:11:50:4d:30:c5:5b:51:8d:ea:99:
c5:83:0a:84:6f:2c:89:fe:81:ea:a3:7d:4c:25:b3:
26:3a:9e:08:b6:47:2a:ad:15:44:8f:a1:74:ff:17:
d4:94:ce:fa:93:b2:1e:80:74:26:d6:41:86:bf:47:
9e:1c:91:7b:d3:b3:5b:8d:22:99:67:27:fb:0b:64:
31:f5:7f:97:38:31:f7:cf:32:f9:a2:33:13:88:aa:
b0:d2:15:5d:0d:55:98:2b:84:72:64:10:8c:fb:e6:
0b:b0:e4:56:00:d3:64:88:7b:00:e7:d4:bc:4a:ba:
7e:2f:df:41:82:1d:c4:6c:72:8c:5e:52:94:40:a8:
54:7e:e0:1c:87:a4:92:69:6c:34:1e:49:ad:a0:38:
8d:3c:8d:52:db:a2:f8:c6:41:35:31:f3:9d:59:f6:
1b:e2:a9:c5:43:3c:b4:ca:f4:2e:7d:44:1c:f0:dd:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:E1:D4:55:3E:A1:87:F6:81:59:B4:3C:C8:4E:F9:33:AE:5C:02
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:da:93:17:0e:91:ea:19:5e:d7:70:f9:98:27:42:6e:fa:
4d:af:20:f0:0f:89:09:31:2f:97:99:5c:db:22:67:68:ba:5a:
f1:cb:d3:43:22:3b:b5:60:a8:99:79:66:ea:c9:b0:af:b6:fa:
31:ea:2d:04:76:8b:e8:de:dc:a5:f4:d7:64:95:79:30:b7:61:
36:2b:b8:1f:9a:a8:51:8d:68:2e:60:a2:a2:53:40:24:02:3d:
f3:86:26:91:95:24:b1:f0:1b:ca:ed:68:97:10:78:3f:41:76:
22:01:df:b4:88:73:8f:61:ed:16:2f:53:80:78:4d:67:14:b9:
68:04:b3:b5:6d:5f:f1:07:9a:0e:56:10:22:3d:7f:e4:b9:c4:
e3:ac:42:31:f9:1e:0e:7c:06:d7:4f:45:c9:b8:25:05:e7:9d:
e6:61:24:38:92:86:43:5f:f7:2b:5f:3b:05:1c:89:78:fd:7c:
1a:4d:9f:a6:aa:26:75:bf:ea:6c:69:1a:94:40:42:e7:82:73:
1c:28:28:f4:ea:07:50:fe:73:56:12:f3:91:85:7a:87:2d:a7:
5a:d5:26:4d:1f:eb:37:f1:74:cf:14:0f:d9:04:2b:8d:5c:2a:
f9:d0:17:da:8b:55:93:1a:79:34:04:cf:e7:ad:b8:62:55:d0:
41:b1:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:27:34 2025 by rpki-client