Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier: KtYBZlAEgx9kCGV2CaK93ffWrAvpkplyFuKkmpHvhKM=
Subject key identifier: 0A:E5:8F:6F:3D:16:4E:FF:47:F4:83:A3:46:F5:FF:F0:5D:B9:28:5D
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 019846D1D369FE0497A4FB2747574B3D6D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number: 0293
Signing time: Sat 26 Jul 2025 13:00:12 +0000
Manifest this update: Sat 26 Jul 2025 13:00:12 +0000
Manifest next update: Sun 27 Jul 2025 13:00:12 +0000
Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: 2ZEXot9g9KPNGlsKOHaUajZSHtclruUTaVKfiKUlgiw=)
2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:d3:69:fe:04:97:a4:fb:27:47:57:4b:3d:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jul 26 13:00:12 2025 GMT
Not After : Jul 27 13:00:12 2025 GMT
Subject: CN=0ae58f6f3d164eff47f483a346f5fff05db9285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:47:7f:5f:7b:f2:e7:be:0c:1e:e8:14:8a:
1c:4e:bb:1c:9b:25:5f:19:30:ce:30:b9:77:33:70:
2e:6e:70:2d:29:4e:9c:e3:d2:56:fe:75:7d:2d:9a:
fe:81:6e:97:3a:ab:e5:e9:7f:81:a4:cf:21:97:d9:
68:77:49:03:c3:0f:f4:71:1a:96:6d:73:69:03:63:
37:48:b1:af:e6:f7:7b:02:33:65:7c:0a:11:dd:38:
f6:bd:40:d5:0a:65:01:0e:a6:58:2d:cb:e4:48:b6:
62:79:04:73:fb:24:9b:bb:fd:7f:65:be:e2:fa:e3:
6c:be:9e:ff:fb:4a:0a:e4:26:b8:4f:36:cd:e8:c7:
c7:d7:39:87:71:72:c1:9a:f9:e1:df:99:ad:41:7a:
5c:15:d2:93:14:64:eb:5b:48:3d:d4:48:80:12:be:
b1:5f:ca:2a:f5:fb:e4:4b:d8:e0:c2:ea:8d:e8:ce:
41:bf:77:a5:30:7d:60:cd:08:bc:06:6b:b9:93:d4:
25:64:f3:28:33:d7:6b:9f:9a:e4:f8:b4:b9:b9:34:
2e:df:89:25:1b:f4:03:d2:35:ec:29:ba:0b:98:f4:
27:59:ce:44:e4:7b:8e:5d:e2:23:d8:7f:78:1f:a2:
52:4d:f8:10:b7:18:0b:0f:8c:4b:21:62:13:0e:68:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:8F:6F:3D:16:4E:FF:47:F4:83:A3:46:F5:FF:F0:5D:B9:28:5D
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ac:de:31:28:a4:5a:a4:7a:dd:06:0d:f2:97:32:e0:2d:e8:
0f:e9:c9:d8:34:ce:1c:7a:69:32:66:1a:4b:94:8a:e1:cd:99:
08:61:55:1a:a4:63:a4:c5:25:0b:db:0e:17:73:14:c4:fb:60:
26:1c:88:cb:77:63:d0:ea:ab:70:a7:0b:61:36:b3:f6:da:61:
40:99:89:0e:13:95:2a:d3:3d:66:a4:75:5c:66:be:f6:d9:a9:
61:16:49:3e:9f:03:6f:a2:01:9b:85:ee:c1:12:09:d8:1d:c1:
97:96:6c:b9:38:ef:cc:04:10:be:f3:6e:92:47:36:64:14:fd:
c6:9f:d4:ac:dc:70:34:b0:2d:0d:1a:37:9f:2c:89:bd:e5:62:
c8:64:19:4b:ac:5e:e2:2d:bf:6a:2f:01:11:5b:f5:04:90:4c:
d4:8a:c4:77:26:37:ee:1e:c6:56:a6:09:0e:32:94:15:e9:c5:
c8:b7:5d:cc:40:1d:f5:f4:bc:be:30:c1:98:74:c2:68:92:2d:
6d:ff:26:6f:b8:08:a6:2b:a0:29:a5:bf:d4:41:2d:12:c6:61:
6b:74:7f:d0:a0:a8:68:31:e8:44:02:34:e9:5e:02:0a:59:5b:
ca:49:2f:d7:31:a7:2d:6e:0e:9b:57:4c:6c:97:ca:f5:87:74:
19:fb:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:46 2025 by rpki-client