Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File: kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier: ZHNvawUuyjMe4GvEub4XZ7IwrLw/BfzFA7CC6ZklFFA=
Subject key identifier: A9:72:42:04:5D:82:F9:CB:A6:9D:3A:12:91:8C:92:88:0B:F9:CF:AD
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer: /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial: 01984B54FE3A9384F3F2D6CA74B4C4D621B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:57 +0000
Manifest this update: Sun 27 Jul 2025 10:01:57 +0000
Manifest next update: Mon 28 Jul 2025 10:01:57 +0000
Files and hashes: 1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: 8SjOlBIY3UElDFo8DCATsIPe6QdtKtP14RrPuf6RXyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:fe:3a:93:84:f3:f2:d6:ca:74:b4:c4:d6:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
Validity
Not Before: Jul 27 10:01:57 2025 GMT
Not After : Jul 28 10:01:57 2025 GMT
Subject: CN=a97242045d82f9cba69d3a12918c92880bf9cfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:74:b0:35:33:70:0a:fc:32:e9:6d:c9:3b:
12:c4:8a:a6:b9:24:af:7d:a9:40:3e:21:0a:ab:3a:
a2:e7:6e:9e:4b:51:3a:5e:92:5a:be:7f:3d:f3:ed:
20:fd:03:aa:34:3c:b2:24:d7:21:5e:3f:cf:9f:fd:
7e:6b:a0:ca:2f:db:3a:53:03:55:6e:c2:44:f7:08:
2d:69:f9:c4:f0:a4:47:79:92:94:51:00:bb:74:95:
07:d8:9f:16:94:ca:4f:6d:c5:a4:68:3f:89:25:c4:
f9:31:c3:5a:1f:4b:4f:7d:b5:07:e6:aa:04:42:84:
cf:42:9e:81:3b:b5:88:67:2b:89:b2:e4:2b:b4:5b:
5f:9d:76:da:87:ad:55:21:5a:0b:14:9b:3f:84:71:
45:b8:2a:77:a0:f1:62:51:63:8e:52:37:d6:62:f5:
41:48:f6:f9:c5:b4:29:77:ac:a8:6b:4d:a6:89:9c:
66:73:23:11:d4:9e:36:a9:fa:49:ce:80:f4:4a:a4:
ea:68:83:d1:80:4f:4e:b0:ff:3d:7b:c4:b3:5a:e9:
dd:92:cf:90:5f:f4:0b:bb:e4:14:22:ae:53:88:a3:
69:0f:3a:25:8b:8a:c4:bf:bd:7c:cb:c5:ec:e7:86:
bb:0d:ed:1c:bb:bb:c3:31:61:8d:5c:cf:18:dc:55:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:42:04:5D:82:F9:CB:A6:9D:3A:12:91:8C:92:88:0B:F9:CF:AD
X509v3 Authority Key Identifier:
keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:9e:73:ea:bc:5a:2d:16:7a:5d:3e:cc:10:9b:dd:eb:91:
7a:30:b2:36:7f:5f:89:ce:1f:45:b5:0c:b0:8a:3e:68:12:f3:
30:ab:6a:8b:4c:b3:9e:3f:10:4d:6d:2c:3f:ec:13:23:34:5c:
c3:a1:46:c1:fe:87:78:dd:3c:ed:dc:eb:48:65:5a:6b:e4:4a:
9a:9e:6d:6c:c0:6f:50:cb:6b:73:6f:16:cb:29:2c:f6:61:24:
4e:b5:2b:99:6f:66:b7:9f:f7:bb:48:07:85:e8:c6:69:06:73:
a3:b9:58:fd:8b:0c:23:e7:11:02:89:f9:6d:8c:96:f4:6e:fd:
01:71:18:d8:f3:4a:99:54:a3:17:dc:1b:d1:5d:bf:78:5d:25:
a7:06:3b:58:b3:47:df:98:7c:7e:fe:62:ae:61:54:96:10:b8:
f0:46:bc:b8:cf:12:0b:ca:6f:fa:79:d5:5d:11:40:12:f0:66:
78:35:ec:c9:82:2e:88:5e:da:f3:ad:2b:1b:56:93:1c:dd:b3:
39:da:0a:a8:5d:92:6e:a8:3d:e1:90:3b:20:a3:00:78:8a:24:
7a:46:93:22:60:26:d8:58:16:5f:0d:4e:86:52:1f:e1:99:d2:
bd:73:34:4c:68:81:2a:7d:15:c8:4e:a3:4f:34:83:a6:dc:0b:
df:db:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:08 2025 by rpki-client