Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: RQTVtoNAZ/5VwzIO5exlOcbL2EgPBn1scdyP8fNKXDc=
Subject key identifier: 6B:0F:FD:7B:63:3D:66:9B:01:1E:3E:CF:C3:88:F0:51:84:BD:1E:02
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 019873E3C5EA4F6BFCF8DE71FD838C666D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:43 +0000
Manifest this update: Mon 04 Aug 2025 07:02:43 +0000
Manifest next update: Tue 05 Aug 2025 07:02:43 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: XGuTM07FuWIgwB+In3R4Is7T8/aRh/ZTpU3qhVfcpfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c5:ea:4f:6b:fc:f8:de:71:fd:83:8c:66:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Aug 4 07:02:43 2025 GMT
Not After : Aug 5 07:02:43 2025 GMT
Subject: CN=6b0ffd7b633d669b011e3ecfc388f05184bd1e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:11:89:f3:ef:65:bb:a5:0c:16:50:df:c7:
16:22:f7:e5:e8:90:d1:d1:bd:ad:71:cc:4a:31:a9:
98:1f:6c:54:f2:b9:31:84:a2:7f:ff:58:8b:18:46:
e4:3b:0c:c2:c6:0e:69:8b:0f:69:fa:a6:71:a4:ba:
40:41:d0:5b:67:5a:de:23:d6:1c:2e:42:01:31:67:
2c:4c:75:5c:7d:e3:98:5d:e5:58:97:a0:4a:1a:fb:
6e:d3:28:a2:88:98:29:fc:c8:51:33:9d:23:e4:c0:
06:5a:5e:e7:26:73:77:26:3e:1d:db:8d:79:30:5c:
a1:dc:f8:77:0d:ec:5c:e9:51:37:dc:6e:36:6d:e5:
52:32:c4:a8:33:93:61:87:c9:ff:cf:6a:de:39:09:
5c:a1:e5:57:8b:67:23:03:d9:dd:2b:e3:57:b1:5f:
5d:51:86:f4:20:4a:05:c8:07:29:79:4b:0c:fe:e5:
ce:e1:dc:eb:1c:30:a1:22:c9:6a:fb:1b:a5:a2:76:
88:cc:fb:f6:12:e1:ef:98:c4:de:35:8c:aa:29:be:
14:1d:8f:4d:76:e4:4d:c3:95:c9:02:ca:00:83:4f:
61:66:bf:a6:db:ca:54:c3:f6:f1:82:ce:d6:29:c9:
9a:a9:a0:bc:32:9e:b9:01:39:bb:7e:e1:0d:66:33:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:FD:7B:63:3D:66:9B:01:1E:3E:CF:C3:88:F0:51:84:BD:1E:02
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:38:56:33:78:3e:8a:e0:7d:e0:ff:4e:1a:8c:af:09:c5:
b1:1e:d5:4f:bd:39:08:13:1b:43:b3:ec:9a:ff:e2:5a:97:97:
43:a6:c7:f1:b0:62:83:d2:e7:37:f7:48:e5:2b:9b:ee:fb:b3:
6f:0c:8c:8b:6c:cd:87:03:14:c5:0c:1d:fc:d9:53:41:35:3f:
7b:9e:77:b0:73:68:3b:7d:fe:96:00:8b:73:7b:42:59:f2:a6:
55:b8:97:e9:28:48:84:e9:7e:b9:51:a7:ec:00:08:37:d0:e9:
b5:cd:0e:53:1f:b5:5b:47:94:33:38:42:ec:a9:4d:9f:94:01:
8e:d0:69:43:a6:76:b0:96:48:8c:9c:a1:ec:60:c6:e8:3c:35:
7b:cf:99:ef:e9:ef:23:4f:67:d6:5d:b8:ce:43:79:1d:6a:54:
e6:a6:b2:5b:01:e2:57:b0:b2:77:c0:34:cc:7d:13:fc:77:32:
8e:e3:ba:a4:31:43:bb:76:64:eb:18:cf:f7:bc:ab:cc:aa:fb:
5c:44:e8:40:eb:bc:f4:29:db:6c:ed:ed:b2:63:78:a6:f0:b5:
70:dc:0e:6a:df:99:82:93:d8:50:b3:a0:f5:36:c0:16:32:40:
4e:03:5c:f6:44:ad:c1:bd:f2:b2:3d:19:20:3d:7c:26:19:a3:
e6:5b:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:26 2025 by rpki-client