Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: nzyMqnCio8ULQDNnaYQAhPYBrkrncdvehQzJ80++o+U=
Subject key identifier: 16:72:8B:90:A6:FF:9A:86:3A:D0:9B:4A:A2:3B:45:33:D5:86:28:E4
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 019881677865FF6EB5386591AD2DC82DE549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 1315
Signing time: Wed 06 Aug 2025 22:01:38 +0000
Manifest this update: Wed 06 Aug 2025 22:01:38 +0000
Manifest next update: Thu 07 Aug 2025 22:01:38 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: laYpuKMS3kH5Upu1hj88NTWutje86sOTuSiWeGs/Qo8=)
3: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
4: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:78:65:ff:6e:b5:38:65:91:ad:2d:c8:2d:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Aug 6 22:01:38 2025 GMT
Not After : Aug 7 22:01:38 2025 GMT
Subject: CN=16728b90a6ff9a863ad09b4aa23b4533d58628e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:20:13:a8:77:51:be:a3:7e:c2:87:60:50:
cd:08:ab:18:30:c3:64:b1:a0:7a:0b:d7:c2:ff:5f:
8c:d2:f4:34:b3:d2:e6:b3:39:b3:f3:51:ae:6e:6d:
92:2e:7d:c6:15:38:10:54:66:56:48:f0:ba:4a:47:
fa:7d:53:8b:27:8d:e7:c8:25:d1:d1:2c:40:ee:d6:
08:49:2a:cc:7d:84:27:fa:0b:57:f6:65:1f:28:a6:
45:8b:95:63:a5:89:99:14:e2:74:1b:0f:eb:40:6c:
b8:cc:14:83:a1:8a:1d:cd:1a:cf:5a:91:a5:01:73:
24:e9:22:70:9e:58:cf:60:05:d0:07:a9:ef:f2:1d:
64:e2:82:74:d8:65:3b:76:b8:0b:53:8e:1d:06:1a:
3c:21:c8:31:0f:d3:3c:49:57:7c:43:ff:81:aa:76:
70:da:c2:a1:9d:72:cd:ac:ba:3d:a5:c1:cf:6a:d3:
a6:20:b5:f5:fa:2b:e3:f2:00:c8:fc:af:c6:67:ba:
65:d6:ba:31:a9:8e:fe:17:97:95:20:e8:f3:0e:89:
60:81:71:a8:5c:3f:0f:cd:e3:7f:d0:e8:f1:1c:a1:
5f:e9:d6:5a:7d:d2:54:68:72:8e:02:d0:07:49:75:
f1:e2:c4:a7:1c:f7:fe:4e:cc:7b:fd:2e:3f:58:d6:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:8B:90:A6:FF:9A:86:3A:D0:9B:4A:A2:3B:45:33:D5:86:28:E4
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:15:f5:f8:6d:03:41:dd:96:fe:b1:aa:bf:d6:f8:b8:6d:6c:
27:98:46:1a:08:68:44:b7:ef:4c:55:3b:f5:45:75:88:14:e5:
27:43:25:3c:69:5b:3e:40:32:9e:2d:72:69:e4:9d:d9:fc:e3:
16:6f:06:c2:52:0d:0d:cf:18:a7:1f:64:6d:c2:bc:ad:ab:c3:
bb:8a:a1:52:8e:63:6e:1d:0d:6c:72:ba:cc:ed:a4:d2:73:65:
56:b7:ef:7e:fb:7f:5e:53:26:41:b6:83:e7:0f:bf:c7:66:56:
a6:ad:f3:11:06:c4:fa:60:29:f7:91:38:cd:d4:45:b9:bc:eb:
2e:f7:ba:0c:56:54:3e:f9:27:b8:86:5c:e9:12:70:99:24:c6:
a5:93:9b:21:74:0a:63:30:85:76:71:e6:5f:40:c3:32:23:7b:
f5:fd:93:07:3f:33:fa:04:76:37:e2:17:ae:cf:ec:55:14:b8:
34:77:3f:e6:45:c6:2d:a3:e0:fc:94:e7:43:14:fb:1f:09:ec:
e0:bb:7c:71:cb:00:2b:06:a9:c6:e5:ec:c2:3b:c8:4e:1b:05:
47:8c:84:53:4d:89:8f:66:b0:95:c0:6b:2e:65:34:d1:56:82:
1c:a4:bf:ed:eb:de:d4:dd:2b:89:57:3f:e6:ff:84:40:2d:77:
47:76:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:51 2025 by rpki-client