Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 4VgO8K0AZXV2AN2FpLcJQWC0pNjUADbzWkEVXwMgEGA=
Subject key identifier: 37:49:00:F2:AF:98:8D:1E:FA:AA:F7:7A:BC:55:33:77:C7:B7:56:7E
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019881D47FF716DCEEA2C3C34F7465DC6BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 00:00:43 +0000
Manifest this update: Thu 07 Aug 2025 00:00:43 +0000
Manifest next update: Fri 08 Aug 2025 00:00:43 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: 2xSR3KNFOY5osJJi4n2AfrKQq6dBiuWB0Ne/ervgzAk=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:7f:f7:16:dc:ee:a2:c3:c3:4f:74:65:dc:6b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Aug 7 00:00:43 2025 GMT
Not After : Aug 8 00:00:43 2025 GMT
Subject: CN=374900f2af988d1efaaaf77abc553377c7b7567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:17:e2:96:ec:f5:2c:9e:78:12:fe:9d:2b:
68:f8:06:cb:f1:e5:eb:24:a6:26:ad:8f:fe:aa:d0:
31:86:d5:b3:86:eb:7b:b8:63:98:35:90:73:ab:98:
31:c3:dd:f0:97:62:e1:c4:89:b3:25:53:68:be:ab:
2c:56:5f:4e:e0:de:58:92:9d:13:93:e8:71:3a:cb:
45:25:ba:cc:36:a4:07:2e:30:4c:c4:cd:8e:1e:61:
94:1f:2f:ed:b8:e7:30:3e:74:1b:4c:63:93:e9:99:
c3:ab:f9:19:74:d8:0f:59:dc:21:55:3c:11:41:4b:
19:69:44:b9:ce:11:c3:06:72:10:8f:63:b8:22:08:
d4:86:da:fc:e5:c4:79:6d:5f:5b:fb:9a:f1:48:a5:
ac:6a:4a:e7:d9:3f:c5:d5:54:e8:50:f6:db:e1:1c:
1a:0d:c7:2b:64:82:cd:aa:da:46:13:72:1c:63:54:
e4:0f:a7:6d:94:af:71:0e:9e:f7:33:27:95:c5:bc:
a7:fb:6a:8e:ef:a5:51:93:ca:5a:01:58:bb:3b:b1:
ca:43:bd:d0:61:4f:a9:f5:d2:ff:2d:bd:49:34:4a:
e5:17:4d:7e:cf:b5:04:cd:c0:33:df:49:02:dc:42:
43:bd:d8:c1:8a:35:c1:aa:ac:7b:9f:db:d9:ec:c5:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:00:F2:AF:98:8D:1E:FA:AA:F7:7A:BC:55:33:77:C7:B7:56:7E
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:b4:b9:73:6e:b6:b3:d9:12:85:0d:fc:24:dd:9d:92:f1:
fc:d3:e4:70:c7:66:a7:9d:1e:28:7d:7e:15:b3:26:81:87:44:
f4:ea:34:b7:62:33:de:52:d7:e1:ba:e9:e4:2f:5e:ee:3c:a4:
58:8b:3e:28:36:95:a6:fd:d4:74:db:f7:f3:00:a8:24:81:a2:
ec:eb:99:82:e7:90:ea:b4:c2:3f:da:e0:95:6a:68:5c:a4:00:
a3:2d:dd:94:7b:b7:55:06:7b:74:9c:66:4b:59:78:9e:fc:3b:
60:cd:79:87:67:ce:d2:d3:4e:de:77:0a:ae:19:45:c5:0f:92:
ce:c2:c9:3b:1a:85:33:3e:a2:13:54:f3:ca:66:2f:f9:27:03:
d0:55:97:df:23:29:80:fa:c5:f5:df:50:1e:9a:8d:ce:00:d0:
7b:3a:80:a1:3d:0b:52:4b:ba:81:46:03:6d:f0:7c:ce:e2:eb:
db:fc:54:5d:ac:55:5e:1d:80:00:fe:79:1c:6b:87:6a:91:54:
e4:d4:fc:bb:93:92:c0:95:1e:a7:32:a5:47:1c:d3:1a:d2:03:
1a:25:4c:8e:40:e4:f5:53:59:3b:7b:91:49:18:82:a4:b7:d1:
e0:ec:bd:a3:67:6f:4a:1d:dc:6c:85:1d:79:97:71:81:62:00:
b3:4e:3f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:10 2025 by rpki-client