Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: NxrqoH9glMug+6eXeLS0M7ml2mT7nuL/mRU1fb1w4ms=
Subject key identifier: DD:9C:EA:66:EA:A7:60:C5:95:D5:DA:D7:2E:A1:DB:0A:80:05:48:C2
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 01988C57E0C6A53D790892B13C508F4FBD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 0683
Signing time: Sat 09 Aug 2025 01:00:25 +0000
Manifest this update: Sat 09 Aug 2025 01:00:25 +0000
Manifest next update: Sun 10 Aug 2025 01:00:25 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: 1qDoOg6yKA3tEHhb5aNy2P03DKSMn1WtNVYguCyD2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:57:e0:c6:a5:3d:79:08:92:b1:3c:50:8f:4f:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Aug 9 01:00:25 2025 GMT
Not After : Aug 10 01:00:25 2025 GMT
Subject: CN=dd9cea66eaa760c595d5dad72ea1db0a800548c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:58:c9:32:77:82:bb:9e:ee:e1:be:f7:25:
ed:d3:7d:97:df:ba:5e:13:44:56:40:6e:a1:3a:ff:
29:f6:d9:7e:5e:fc:fe:2b:fa:cc:4e:39:ce:96:c8:
63:2d:04:55:f4:d8:5c:08:34:9b:31:38:cb:d6:aa:
8b:ab:d4:d5:ec:d8:a3:91:54:71:1e:4c:a0:43:84:
aa:8d:bb:56:3b:a7:9a:34:2d:f2:8e:82:49:53:52:
2d:ff:80:d2:7a:86:ef:db:be:52:55:61:1c:c5:ee:
73:66:16:d1:71:d7:da:54:70:97:97:93:83:72:e5:
be:1a:49:05:2e:4d:2d:46:bd:02:ac:de:93:c0:26:
a2:8f:51:af:a6:50:69:42:8b:d9:63:ff:c3:7d:3d:
37:94:87:0e:b1:60:a3:ca:59:7b:8d:2b:b6:ae:20:
6c:e5:90:48:3a:5a:67:ec:41:35:d1:7f:48:0b:c6:
eb:f0:1d:e6:ce:91:05:2e:f9:a7:23:26:f8:ce:50:
5a:56:0f:05:91:ca:c9:37:da:86:46:ac:3f:f5:14:
a2:51:10:c2:16:e7:2e:95:6c:ea:08:92:56:47:6e:
09:e4:42:8d:57:a3:a7:ea:61:3c:d4:9e:37:cd:6f:
21:c2:bd:a1:71:63:49:7c:50:50:82:27:84:b1:e7:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:EA:66:EA:A7:60:C5:95:D5:DA:D7:2E:A1:DB:0A:80:05:48:C2
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dc:54:b6:c3:72:42:ad:c5:76:7d:72:98:dc:df:e2:96:1d:
df:4f:b2:de:bd:1d:15:a1:ab:21:b7:34:3b:8b:f7:23:1b:e3:
05:63:98:d2:e7:a1:9f:8b:da:55:ef:1b:fa:c7:54:8a:66:6a:
02:94:5a:99:23:70:8a:a5:8a:c7:9d:c2:a6:c2:f5:5c:0c:e1:
55:7c:8b:8f:f4:64:62:b6:60:ec:11:31:c2:37:51:d7:31:fc:
fe:33:6f:04:f2:1a:86:46:a0:b1:62:68:cc:f9:55:2d:f0:93:
0e:1d:fc:a5:4c:99:aa:ee:82:f0:42:b7:00:12:f4:df:9b:f3:
c1:b9:93:e2:07:8a:89:79:a0:2a:a3:ea:ce:1d:20:a7:8b:56:
5f:57:41:05:e0:0f:d9:47:16:b1:59:5b:8d:f3:1d:38:02:2b:
7c:c7:02:65:49:81:e8:60:7f:9c:1d:05:eb:05:e9:45:b4:69:
94:92:26:87:9c:47:d6:ff:30:c8:b2:28:6b:45:bb:c2:33:24:
fd:d7:dd:83:59:ae:ee:3b:b5:1c:26:d3:b4:91:db:8c:dc:7d:
29:12:4d:b9:ae:ff:b8:24:3f:19:51:3c:4b:a1:cf:02:c0:46:
75:0e:96:8e:0d:6f:eb:86:bf:db:ef:5a:38:84:09:c7:e1:82:
a9:31:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:21 2025 by rpki-client