Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: ZGAP3HNHrXkJENvndi9E6x0WuNyP3n+g0tlin8V9yyo=
Subject key identifier: 3C:50:18:98:4F:52:1E:2B:DD:43:94:D1:26:BB:93:7B:05:31:F2:23
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 01989110CDF9F951588B55264213DD1825A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0F03
Signing time: Sat 09 Aug 2025 23:00:54 +0000
Manifest this update: Sat 09 Aug 2025 23:00:54 +0000
Manifest next update: Sun 10 Aug 2025 23:00:54 +0000
Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: MHgL6OWO9mF+oRAPXKpPPMuPWLu/d0BS7lP3wdjxiuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:cd:f9:f9:51:58:8b:55:26:42:13:dd:18:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Aug 9 23:00:54 2025 GMT
Not After : Aug 10 23:00:54 2025 GMT
Subject: CN=3c5018984f521e2bdd4394d126bb937b0531f223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:9a:e7:72:04:86:94:5d:cc:c1:52:f0:d2:
73:79:83:ee:f7:55:4c:17:9e:2c:09:18:56:48:4e:
49:48:94:28:a1:25:4a:ae:2b:49:7d:ea:4e:c5:ae:
db:b6:d3:4f:8b:4a:a3:71:d4:da:64:fc:0b:e8:9e:
f0:5b:eb:68:0c:cb:a0:58:9c:ac:92:06:6c:e1:71:
5d:9e:18:f2:6a:d7:89:2e:35:3e:a9:76:93:3e:df:
35:37:1f:26:54:da:f2:fb:f9:14:fc:e3:77:ff:c4:
dd:05:ef:fb:43:84:ca:30:74:77:2a:10:11:ba:ce:
c2:95:8b:e8:60:f9:21:66:7a:9a:93:73:f9:8a:20:
87:e4:8b:f5:5a:e7:0c:c5:b6:c4:6c:71:84:e6:66:
bd:93:85:38:d2:bf:a6:7a:ab:d5:10:4d:5d:3f:94:
46:15:e5:e4:31:61:60:1c:e9:fe:64:c8:89:8a:98:
09:21:61:97:e7:41:6e:66:5b:8a:36:eb:58:2f:7b:
28:2b:18:bc:12:2c:95:c4:e3:ea:e3:cc:f4:e0:a2:
92:10:cb:14:2a:a0:5b:77:7b:f6:62:b2:be:8b:64:
2d:3b:3a:29:e1:2c:b0:02:f7:dc:5f:7b:5a:94:b1:
95:63:f3:20:27:fa:79:13:fb:6e:4c:1d:6b:1f:01:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:18:98:4F:52:1E:2B:DD:43:94:D1:26:BB:93:7B:05:31:F2:23
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a6:76:40:57:59:26:c8:d6:57:08:09:5f:1c:0e:b1:3c:68:
5b:5d:cc:95:0a:c2:63:2b:4a:7c:2b:a9:c6:88:f9:f7:94:f2:
a5:1d:f1:50:10:7a:c7:df:0c:6c:61:bf:67:38:be:d5:19:6c:
9e:eb:3e:18:f5:e0:bd:6c:08:48:c2:e4:af:f0:37:53:e0:7e:
a0:ff:7f:2c:e0:b9:26:1f:37:7d:78:c5:a1:ec:70:70:1f:01:
ec:5f:ae:22:13:88:39:ee:1d:0f:94:bd:60:cd:7d:c5:fb:8d:
34:6f:93:a7:87:33:11:16:d6:ff:8d:4a:dc:7c:d7:19:69:28:
4c:40:5b:71:b3:7f:d9:d6:d3:90:e2:81:4a:c7:45:56:60:b4:
41:2a:89:69:b2:cd:51:4e:c1:c9:a2:3c:eb:db:26:d9:da:41:
c4:f4:ec:62:c0:7c:4e:5d:2e:3d:1f:b9:13:04:6c:bf:28:2f:
53:90:0b:81:2e:0d:95:bb:c6:9a:41:81:f4:91:5c:16:67:19:
8e:2b:f8:61:0d:cd:ac:48:29:2e:7c:80:60:73:ef:a5:5a:e8:
c9:ea:1d:a7:e3:a4:79:15:6a:6e:55:90:b9:a3:1b:46:c2:24:
ed:38:a9:87:8f:77:3a:fd:d1:e6:ab:24:f9:b6:0e:db:c6:41:
9f:a4:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:44 2025 by rpki-client