Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: ryn1+ZGZhg+DZGeHg/909Yu/oP3aidfetiu+6NOsupA=
Subject key identifier: 5D:3C:14:98:D7:99:C8:71:E8:C5:B2:F7:22:02:79:69:74:09:FF:9D
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019873E1DBCF1FE586B4C82EA2C304A82D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 0FA7
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (hash: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: 6RvHipXrGdoCuY//tPh4UzEXylrnl6ULJK4ii1zpBMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:db:cf:1f:e5:86:b4:c8:2e:a2:c3:04:a8:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=5d3c1498d799c871e8c5b2f7220279697409ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:b9:5f:31:01:58:eb:ca:f5:2e:eb:f7:92:
64:7c:8b:f7:e5:bd:95:e1:9c:f7:04:c6:1b:4f:a0:
51:53:d4:56:b2:63:65:fe:d2:42:d8:1c:eb:a2:55:
86:9c:f1:91:29:c1:8e:2e:e7:12:7c:ca:18:fe:59:
a9:62:30:c9:70:14:17:73:ae:c6:56:c5:b7:0f:cc:
19:c1:7c:dc:cd:a5:c2:df:7f:a8:3a:7a:fb:42:fb:
52:a6:1d:8c:10:85:f1:e3:00:3c:0b:b1:6a:b7:eb:
af:65:88:06:2d:36:bc:9d:74:f0:29:6c:18:6f:07:
d3:2f:64:28:c3:10:fe:70:2c:c0:6b:4a:3e:47:d7:
a1:bf:24:41:e0:19:78:6f:7c:ca:ad:1f:06:38:96:
08:b8:ae:1f:af:8b:98:ff:f3:1d:f1:7f:09:20:38:
95:ad:66:ea:7e:92:a3:fc:b2:14:27:53:75:fc:d4:
ec:d9:df:5f:3b:f5:a1:ab:79:ff:64:ac:d3:5a:ef:
cc:32:e9:ff:90:65:11:85:f1:fc:43:1a:a5:6d:75:
75:26:98:fd:aa:21:fa:c5:c3:d9:3e:6a:54:cc:c5:
71:1d:f6:3b:cc:3c:5d:28:e1:98:86:88:73:56:32:
5f:c2:83:63:fd:58:39:bb:3a:b6:c4:a4:1c:5d:ae:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:14:98:D7:99:C8:71:E8:C5:B2:F7:22:02:79:69:74:09:FF:9D
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:a1:d8:76:dc:9d:4f:0d:5a:94:e9:da:9e:47:df:3b:48:
bb:1e:21:5d:c5:50:02:6e:23:71:2e:3d:91:5c:6c:1e:3b:18:
28:49:42:f9:64:b0:09:e6:52:c3:75:ad:0e:af:d4:55:1e:3f:
fd:80:f1:d3:82:49:a5:76:d1:51:be:ba:47:46:c0:2a:e7:f3:
ce:48:eb:e4:c5:3a:9f:28:29:a2:6a:66:18:d4:c9:44:cd:1f:
36:c4:8a:14:62:18:50:0b:d6:58:0f:73:ea:ab:18:1a:5d:3b:
17:da:79:69:d6:50:7b:93:0d:07:ae:e2:c9:be:bb:76:1e:1e:
14:7d:b6:f3:75:d8:6c:f7:aa:60:4b:e0:2a:3a:15:87:76:35:
68:16:05:93:2b:6f:93:da:52:ab:70:f1:77:5b:c9:dc:14:2c:
4c:11:64:c8:26:71:ed:30:6b:60:93:d8:21:df:fe:f4:bf:16:
08:1f:27:44:c5:67:e0:a4:15:37:05:89:28:35:de:93:05:c5:
7e:b6:8f:ef:13:fb:df:56:83:bd:94:de:2a:f1:bb:ea:c8:c7:
2d:2e:60:7a:13:b7:02:e4:db:07:1f:d1:89:f8:7e:91:ed:4d:
8b:e4:63:31:ab:d8:1a:4b:31:1d:70:24:26:ea:fd:f2:75:66:
97:44:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:14 2025 by rpki-client