Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: JmStXLWpXcXAI31Hb85YvO+Tde3S4LK+xDAJihYGLmk=
Subject key identifier: 5D:31:FA:D5:9C:E0:92:B4:C6:77:0D:AB:B6:B4:F5:AE:F8:E7:97:D0
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0198819E53AAAA5D04271C4E432B8C2C9B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 08A9
Signing time: Wed 06 Aug 2025 23:01:33 +0000
Manifest this update: Wed 06 Aug 2025 23:01:33 +0000
Manifest next update: Thu 07 Aug 2025 23:01:33 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: NYByXtwaWU9zD3NEe7MjIrRTHuJCOH+K1fgonOeDFWM=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:53:aa:aa:5d:04:27:1c:4e:43:2b:8c:2c:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Aug 6 23:01:33 2025 GMT
Not After : Aug 7 23:01:33 2025 GMT
Subject: CN=5d31fad59ce092b4c6770dabb6b4f5aef8e797d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:de:7c:cb:00:4f:fa:c2:55:47:5f:74:49:
0e:e1:a9:db:7c:20:0e:46:25:b3:04:7d:2e:3d:3e:
81:b5:54:02:80:fc:cb:94:d9:9e:4e:f8:74:fc:35:
03:07:54:c5:9f:ab:12:7e:e0:46:fb:a0:48:a1:7f:
b5:48:22:83:25:55:1c:ed:cf:39:96:d1:9f:5e:f8:
9d:8a:85:53:62:56:7e:e7:1a:48:2f:59:11:74:20:
3d:84:86:1d:90:94:7e:ba:42:bc:fa:8e:f9:5a:d3:
13:19:e9:54:af:20:b3:df:1b:04:0e:44:bd:92:10:
0f:54:d7:a8:da:8c:6b:95:9a:99:be:06:c9:a8:9f:
06:a3:63:dd:15:ec:32:c5:5b:a9:7e:57:e8:95:78:
ac:98:66:85:cf:8a:c4:42:96:12:4e:c3:91:6f:76:
f8:8d:bc:7f:9a:72:8d:97:5c:63:ed:56:18:47:c6:
16:6a:e3:e1:64:cb:95:96:ad:d1:23:f8:14:e7:85:
c4:22:94:e8:6d:62:ef:3b:5f:f0:f7:bb:4c:cd:ae:
e1:f4:8e:59:ae:c9:a6:4e:71:b1:65:d9:76:17:6d:
7c:3d:e7:55:5f:a2:c5:43:71:44:f8:7d:ee:93:a4:
88:07:bc:d1:df:2e:a8:23:f0:81:30:d2:3a:a0:e6:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:FA:D5:9C:E0:92:B4:C6:77:0D:AB:B6:B4:F5:AE:F8:E7:97:D0
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:94:66:f5:e2:56:ed:8b:e9:c8:73:62:36:8b:de:d7:51:
b4:dc:68:5d:cd:e1:a3:5e:bb:0f:46:51:53:07:b7:cb:fb:8d:
fd:28:87:3f:35:79:22:d8:3e:11:93:2d:f7:3f:20:ff:bd:b7:
22:de:3c:34:73:d4:dc:d7:a6:9e:48:ba:46:7a:46:e6:ae:11:
7b:c4:a9:4e:97:b4:60:75:ba:7e:7a:38:f4:66:ff:91:3e:af:
58:52:e8:36:23:f6:25:63:99:2c:d5:db:1c:79:31:29:d6:f6:
20:58:f9:9c:ab:9c:3e:c9:b3:28:08:ca:d6:5c:eb:73:6b:22:
5d:7c:e6:7a:bb:67:ab:20:6d:09:a1:ab:e7:f8:ce:16:83:5a:
7b:85:43:d2:7f:40:8b:13:52:e7:29:f2:77:cf:4c:ed:7b:f8:
6b:fd:23:81:1a:96:53:8d:07:40:ec:ce:4f:81:95:25:88:ed:
93:69:03:b9:18:c8:3b:4c:2a:e7:ce:67:3e:d1:1a:3c:7f:a0:
69:bd:0d:78:9b:78:58:d4:1d:fa:b8:fa:0d:dc:f2:0c:e1:1a:
39:14:68:f9:12:23:2c:ea:83:e1:f0:af:ad:37:71:b9:f6:ab:
ae:2f:cb:37:57:bc:c3:62:3e:d6:cd:b3:09:af:aa:66:a4:4c:
d5:c4:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:55 2025 by rpki-client