Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: AJIjc25/SG+5VAI5E/H3bOZT/tomxKYLJsdNScGUE2Y=
Subject key identifier: 6B:2F:3C:72:F5:E8:EB:B4:33:EB:60:41:53:CF:49:E5:19:23:26:4A
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 019872CF22776BC2CE4EAC436E94EC95754B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 0988
Signing time: Mon 04 Aug 2025 02:00:34 +0000
Manifest this update: Mon 04 Aug 2025 02:00:34 +0000
Manifest next update: Tue 05 Aug 2025 02:00:34 +0000
Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: mjpkn+FY4H2RWOCRN95HA8Ew3p4rZ2WRBB5iYt5XMWQ=)
2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:22:77:6b:c2:ce:4e:ac:43:6e:94:ec:95:75:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Aug 4 02:00:34 2025 GMT
Not After : Aug 5 02:00:34 2025 GMT
Subject: CN=6b2f3c72f5e8ebb433eb604153cf49e51923264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:b9:d0:79:71:f1:49:a5:a4:bb:86:c4:88:
aa:58:4f:b6:d0:59:da:23:60:18:46:5d:af:2a:b6:
42:5b:a4:a2:c0:5e:85:be:96:71:6b:c0:43:9a:fa:
ae:6c:19:3b:08:d7:b3:e9:65:d2:f5:75:1f:6f:1a:
5b:7e:99:58:99:9e:ae:28:4f:6a:b7:04:47:09:01:
59:2d:26:5d:d1:58:9e:87:ee:80:26:ae:08:0a:38:
9a:f2:64:e0:af:26:47:20:4c:f8:a5:2b:00:de:d8:
ac:b2:8d:e6:5c:87:48:65:61:43:fe:3a:d0:80:50:
c9:9c:b6:77:99:9e:fc:f0:73:f9:1e:fc:0e:5e:95:
cd:de:9b:83:91:44:84:f6:6c:5b:bd:54:86:24:c0:
ee:3c:03:83:d9:2f:9e:17:55:17:a9:fe:7a:61:a7:
9d:54:0c:47:eb:99:3b:25:0e:b0:ef:5c:8e:ba:28:
a4:94:d7:aa:2c:bb:f6:0b:eb:93:8d:f5:84:77:55:
d3:a7:8d:97:7d:8d:e6:c7:ff:da:62:f1:f8:cb:22:
26:69:0d:68:a0:13:a2:34:73:b5:ce:0f:a6:32:da:
b7:2d:c9:7c:1a:6e:61:c9:b8:a1:a1:94:0f:11:0d:
42:a9:24:ea:65:7a:91:10:92:8d:a8:2d:38:d5:ad:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:3C:72:F5:E8:EB:B4:33:EB:60:41:53:CF:49:E5:19:23:26:4A
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:79:5c:94:de:f3:f2:c4:10:20:86:5d:70:4c:94:87:ec:a1:
68:02:3b:af:4f:8c:bc:94:ab:78:2f:01:6f:45:b7:aa:8c:a8:
46:06:b5:53:fc:2c:7c:6f:48:e6:74:65:4a:b6:25:66:5b:65:
81:30:61:00:a5:b1:36:b0:35:93:e2:b8:39:6b:26:87:3d:36:
55:32:7d:f2:d7:12:40:59:3d:de:6a:1e:2f:b4:fd:af:7e:db:
cf:d7:aa:a0:12:9f:f3:b1:28:12:0c:5a:58:22:e3:c7:64:f2:
d5:89:fb:4f:ac:df:d8:f6:3b:4e:25:40:b0:55:71:79:a8:7c:
b5:0f:38:c5:4d:f4:01:60:cd:13:e7:fe:7d:ee:69:86:2c:c3:
a9:50:2f:27:05:7a:de:a2:59:87:ec:7d:3f:54:0d:ac:29:ba:
81:99:0c:0e:57:b7:63:f9:28:45:09:95:37:3f:40:98:ae:84:
3f:b5:14:7b:b1:66:e7:06:9d:10:3b:60:43:6a:32:7d:f6:93:
37:59:a9:21:f7:80:c4:5b:bc:b1:e9:21:40:6e:60:af:8d:ce:
8b:34:71:25:24:3c:bf:37:1f:0b:d0:e5:67:4b:46:08:22:16:
ad:6c:5f:aa:43:04:37:e9:c6:29:a8:ff:9b:63:d2:bd:39:f3:
42:5e:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:41 2025 by rpki-client