Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: t/1+Lt+lrP8LNwJBbe/rBCDQpNyOmtrclaUpHDVyIQU=
Subject key identifier: BD:7D:4D:1E:99:80:97:7E:D7:77:34:0E:46:48:10:42:BF:4A:BA:F0
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 01984407BF233A2285CD79D69D130DDD20E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 0A73
Signing time: Sat 26 Jul 2025 00:00:14 +0000
Manifest this update: Sat 26 Jul 2025 00:00:14 +0000
Manifest next update: Sun 27 Jul 2025 00:00:14 +0000
Files and hashes: 1: fhqhrm_dY2gYWI5oCp04pibtM_o.roa (hash: s8FH9ikZ8P5QdYR5uDaZwWuPJb6gYAb8hHHjeN9RXKc=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: Sv+RR8peiyUg1LZ5TDhnky6X7Q3Zb8jyo/s/x+d1zco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:bf:23:3a:22:85:cd:79:d6:9d:13:0d:dd:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Jul 26 00:00:14 2025 GMT
Not After : Jul 27 00:00:14 2025 GMT
Subject: CN=bd7d4d1e9980977ed777340e46481042bf4abaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:e2:6a:f9:14:38:0c:d0:5c:7a:b3:09:9e:
66:f2:63:34:4b:e4:d2:30:66:a7:72:2b:f0:ed:a1:
61:2f:31:e3:02:3a:89:25:45:56:2c:a6:5f:5f:49:
8e:72:6f:24:a8:11:07:6b:bc:ab:ad:88:74:6f:8b:
81:cc:f4:b4:a5:2f:37:57:fb:60:bd:dc:0c:54:18:
df:cc:26:1a:85:57:ea:2f:01:b9:4e:f4:86:bf:ad:
f9:71:12:0d:c2:5c:6c:4b:d4:15:93:9b:db:df:c8:
fd:3c:78:b7:ca:ab:86:e6:27:c5:6b:46:8b:64:3f:
c6:e9:0f:20:0c:63:0b:75:54:3a:0a:53:c6:d8:dc:
09:09:45:4f:5c:bf:21:7d:2b:bc:76:54:dd:68:a1:
f9:52:89:f3:f7:1e:f5:52:e8:02:e7:12:61:92:28:
8c:eb:02:3a:23:18:9d:d6:3c:28:30:e7:c6:f9:94:
39:54:ab:77:e0:62:48:71:d1:4a:9e:77:b1:3a:63:
5d:8a:80:8d:8b:7a:6c:36:c7:c7:05:f2:42:f0:13:
52:17:a8:6d:bb:06:bd:32:38:18:f6:3d:97:38:f8:
39:82:fd:c9:4f:65:97:44:b2:89:6c:cf:90:a5:75:
4a:da:6f:7f:04:be:18:7c:cb:18:c3:52:bf:70:f8:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:4D:1E:99:80:97:7E:D7:77:34:0E:46:48:10:42:BF:4A:BA:F0
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:1a:04:27:94:83:5c:0e:9c:8f:25:d2:44:2e:4b:cf:b6:
b2:ad:43:fe:9c:32:32:ad:d1:9a:6e:32:0a:37:7f:44:1e:0b:
72:48:64:6d:f4:d2:64:2d:ca:2f:4c:7a:52:d9:55:ad:16:27:
50:f6:3a:ef:a7:17:e6:7a:5c:12:9c:71:93:ba:fa:f0:ee:3c:
ac:20:c1:79:0c:11:0d:fb:0e:79:1e:b6:db:ee:cd:e8:00:48:
7b:5d:9a:38:97:90:8e:6e:b3:b4:73:94:16:35:5f:4f:29:7e:
61:6d:a2:f2:bc:ff:57:c1:aa:a1:b3:fa:05:0c:b6:be:1a:f1:
5d:fb:e1:64:01:4d:52:e7:8a:ac:93:f1:96:0e:9e:23:88:69:
93:e7:90:db:f9:60:63:2f:d0:5f:4c:c9:15:43:b4:0e:ca:ec:
24:8f:b3:2d:1d:e2:76:6c:b0:90:4f:ce:db:af:b2:86:35:33:
45:c0:cd:ce:ac:78:cf:f0:6c:7a:3c:bd:06:99:67:3c:3f:b4:
e8:5b:44:2b:8b:e8:9a:63:9d:34:5a:da:7e:5d:91:e6:00:e3:
1d:77:c7:84:59:c8:bf:82:05:63:d2:1f:18:3d:d0:fb:72:d7:
7d:59:43:e6:7e:9b:82:40:45:d9:a2:af:0b:54:80:21:c1:b0:
9c:57:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:33:11 2025 by rpki-client