Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: 25+EtSpr/YZ86Zx3qbjQbX/GYhRpTMRndIMOxKsYEcI=
Subject key identifier: 59:B2:17:39:CB:96:68:69:88:7F:CE:24:BD:3C:16:00:0C:D7:9C:6C
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019845892F3797576EFBB22A0A5F402C98C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 05BA
Signing time: Sat 26 Jul 2025 07:01:14 +0000
Manifest this update: Sat 26 Jul 2025 07:01:14 +0000
Manifest next update: Sun 27 Jul 2025 07:01:14 +0000
Files and hashes: 1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=)
2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: Lck4rf+xWpoGJ0FaKNF+pklMM3iYmXDQxBkzkIp0z4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:2f:37:97:57:6e:fb:b2:2a:0a:5f:40:2c:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Jul 26 07:01:14 2025 GMT
Not After : Jul 27 07:01:14 2025 GMT
Subject: CN=59b21739cb966869887fce24bd3c16000cd79c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:19:c8:29:94:84:6d:0a:c5:e5:84:81:02:
b7:6d:14:fd:55:eb:f9:39:cd:59:a0:8d:df:37:ac:
88:42:27:10:ad:6c:bb:c7:e3:54:1c:b4:83:37:9e:
69:30:0e:c2:21:6b:f3:a4:8f:7d:56:fd:52:30:5e:
11:92:df:e8:3a:ba:9a:a7:c3:f8:81:74:4f:1a:8d:
b4:bb:6f:71:1b:f2:ae:28:e5:e7:36:e3:5f:5e:c9:
55:54:48:08:38:d8:b8:a6:8d:d8:35:e9:82:fd:b5:
a2:81:ae:66:25:90:b3:5a:22:11:3a:cc:79:48:59:
00:04:50:14:07:36:f6:1c:53:69:45:09:e9:75:19:
69:19:ff:e9:c8:1a:bb:46:35:30:72:29:26:4a:ff:
55:fd:35:e1:96:bf:96:f3:1a:a6:0e:9b:c2:ff:40:
68:5c:da:0d:92:b6:9a:ba:ba:40:b0:d2:30:e1:d9:
c0:05:ef:55:fd:43:fa:3f:21:cf:33:c1:a6:2f:62:
b8:99:fa:3d:75:09:4b:13:e0:3a:25:c7:b0:f3:ad:
69:f2:89:71:1c:7c:5a:f3:00:74:3a:cb:21:3e:30:
83:12:fa:02:d3:a6:d9:b1:12:5a:45:83:70:3c:ee:
bf:de:e6:8e:aa:41:5a:9d:49:4e:10:9b:3b:08:d8:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:17:39:CB:96:68:69:88:7F:CE:24:BD:3C:16:00:0C:D7:9C:6C
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:72:cb:91:41:3a:5d:37:3e:1a:e0:a6:d3:b9:4e:f7:25:0d:
8c:e9:2c:24:f8:1c:f8:6e:c4:06:6b:a0:6f:cb:4a:63:e7:3b:
05:4d:fd:d4:bd:40:ea:0f:eb:ae:83:86:67:4d:8c:bf:1b:d8:
e3:ea:f8:8b:a0:8e:20:e7:0e:0b:c1:8d:99:e8:df:69:e1:88:
43:45:b2:6f:f0:45:da:8b:09:ce:1b:c9:7d:b4:10:84:79:a5:
2e:da:67:0d:70:07:93:4c:69:74:73:a1:e7:5f:a4:cf:f5:91:
33:00:b7:2e:36:61:d7:ea:8f:e5:a8:0b:df:a1:43:65:fc:5c:
f3:ae:9a:89:4a:93:5f:76:89:94:1a:d6:ea:50:e6:9b:f7:b2:
bb:9d:6c:f9:3f:2c:56:7c:eb:76:37:e1:7d:48:c1:00:ae:03:
d7:5e:66:58:7e:a7:14:ec:d9:e5:b0:82:86:7b:24:59:6f:5d:
25:44:1d:c4:b7:d1:ec:25:6b:8e:fa:90:dc:99:cc:1b:ae:17:
e4:34:ba:36:75:18:62:26:b8:a7:e9:59:81:ed:b1:bb:ce:f2:
48:57:49:97:62:1b:0a:1f:c8:54:4e:4e:6e:b3:c3:23:3d:6e:
e4:af:f7:f2:ae:20:c5:02:b1:2b:79:46:66:96:af:98:3a:6d:
09:5f:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:19:28 2025 by rpki-client