Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: juLP4Ln/exG0UZ5HrWkHMh+DTOlsTRKiE99W/OFVvao=
Subject key identifier: 42:06:B1:A2:55:45:D6:13:64:09:73:6A:FA:EB:B2:D7:39:A9:F4:F9
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019A5307DBCD41B395C137F6D1838E3B0AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:15 +0000
Manifest this update: Wed 05 Nov 2025 08:00:15 +0000
Manifest next update: Thu 06 Nov 2025 08:00:15 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: PCxWiKmx6fRuh15jjvMZ9v17kEFFSrvJcvgptreiDTQ=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:db:cd:41:b3:95:c1:37:f6:d1:83:8e:3b:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Nov 5 08:00:15 2025 GMT
Not After : Nov 6 08:00:15 2025 GMT
Subject: CN=4206b1a25545d6136409736afaebb2d739a9f4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:77:68:f2:b5:2d:f6:b3:c7:b2:61:6a:6c:
33:23:45:06:a4:0c:f7:35:81:54:06:0c:47:8a:ca:
ce:86:8f:a8:d3:bf:ac:ab:96:01:35:bf:8d:7f:1d:
8e:41:2f:5e:f5:0a:e2:9d:d1:85:27:93:21:0b:15:
b1:29:37:fd:9b:34:8a:9c:1e:82:b2:8c:f9:5e:43:
30:b8:8b:e3:aa:e0:ed:93:4e:d9:72:05:e4:45:d3:
80:4b:52:72:10:e2:38:b5:17:ab:da:86:89:5a:1e:
b1:7d:03:0f:30:44:71:34:16:97:72:09:8d:13:e3:
c4:c5:36:75:5c:fa:6d:9a:18:39:8c:aa:c4:e8:aa:
5b:88:46:9c:db:61:1d:56:64:74:1a:02:92:c1:33:
13:79:96:2f:38:0f:4e:d9:7f:39:df:ca:6f:77:b8:
af:ec:41:15:cf:1d:57:23:b7:5b:de:7a:1b:49:f4:
6d:b2:23:7d:ca:5d:d7:82:51:49:08:a4:98:b0:d4:
27:6c:b7:e2:a0:f6:18:d6:77:76:f1:76:b0:24:5b:
54:4b:6f:04:bb:7c:7b:ed:e6:b9:61:2d:7d:e3:43:
76:56:d8:b5:10:68:f7:9f:b1:83:23:b2:1e:be:86:
a9:67:f3:92:02:ee:70:57:98:e3:2b:c8:db:15:83:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:B1:A2:55:45:D6:13:64:09:73:6A:FA:EB:B2:D7:39:A9:F4:F9
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5a:6c:d4:e4:4d:29:6d:34:09:0a:4d:2c:70:5c:36:54:ad:
d5:e9:20:2d:73:e8:5a:90:2b:1d:e4:0a:b5:de:fd:7c:c1:bf:
6c:c2:7a:46:4f:2e:97:e6:4b:13:c7:85:01:d3:71:6e:9a:33:
08:71:1f:49:b3:15:85:09:47:00:bf:c5:51:44:64:9c:01:9e:
0d:4d:78:54:b5:37:d5:92:4a:6b:df:a7:ce:27:07:d8:45:23:
3b:8f:eb:5d:fc:4d:e2:dc:19:31:fb:d4:36:94:e5:db:75:f1:
42:c7:30:a9:07:ca:c4:17:b3:97:49:76:2f:8b:8a:de:e3:34:
08:88:5f:11:74:5a:e2:20:45:1a:62:cd:dc:d5:e3:26:fd:0e:
b5:32:90:bc:83:30:3c:b4:c8:fa:4e:e4:19:cb:b8:09:79:42:
5c:27:f1:75:ed:2b:87:5a:9a:07:94:2e:40:a5:95:bc:53:00:
11:a5:64:a9:37:76:2b:88:0c:6e:06:17:0a:f5:87:38:46:24:
56:89:c7:e0:b4:77:99:2b:75:ad:27:ed:1f:34:45:e4:ac:e5:
56:32:61:27:04:82:b2:e3:60:98:45:4b:c7:78:3c:82:1d:a1:
a4:f6:60:ed:d7:06:82:82:47:c8:5a:aa:5f:59:a8:d5:ae:9c:
7a:eb:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:48 2025 by rpki-client