Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: glJFgnq6ML30B5isFA2N/pgW1j4aL/hipodsuFjCmmk=
Subject key identifier: F1:00:E5:FC:AE:3C:36:30:3F:98:6C:12:0C:5A:5C:18:1D:47:C6:D9
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 019922FAB0D1154A7AF159708DFABC1A56BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 07:01:18 +0000
Manifest this update: Sun 07 Sep 2025 07:01:18 +0000
Manifest next update: Mon 08 Sep 2025 07:01:18 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: vGAjXyS3XUUADN5OxKI9hwOxKxC7Gs6jlKEemWzvUVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b0:d1:15:4a:7a:f1:59:70:8d:fa:bc:1a:56:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Sep 7 07:01:18 2025 GMT
Not After : Sep 8 07:01:18 2025 GMT
Subject: CN=f100e5fcae3c36303f986c120c5a5c181d47c6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:4d:01:24:30:a6:2a:c6:dc:32:ba:13:e9:
c7:43:52:c7:8d:cd:33:7f:6d:ef:e9:6f:85:3d:73:
e1:5f:70:f7:6e:4d:24:0e:6c:fb:16:0d:34:df:99:
83:21:95:76:24:3e:4d:40:37:dc:ae:c2:36:2a:16:
55:68:e5:7d:3c:f6:be:97:8a:36:4b:2e:60:1e:26:
f9:9d:64:09:e0:58:41:d2:bc:59:d2:19:ea:78:7b:
bd:54:80:00:17:9d:40:b3:3d:3c:3d:9a:4c:46:a3:
c8:44:6d:8a:1c:57:c1:ad:fd:1e:cf:84:70:34:b1:
06:08:44:7d:30:b6:c6:8a:f4:ef:01:53:01:3e:11:
cc:1a:91:e6:90:b1:d9:58:13:60:95:4e:88:29:70:
eb:27:ae:73:0e:07:c5:5e:6c:e1:a7:58:8e:fe:30:
0a:d4:ff:73:c3:c6:fa:42:f3:8a:2e:34:0c:09:cd:
d9:5a:03:b0:57:d2:42:ca:7d:b6:5d:7a:fa:6b:16:
a9:32:d3:9b:d8:86:40:52:f3:07:9e:90:c1:64:a4:
17:a4:7d:0d:4f:f9:f9:59:8d:d6:94:9b:b9:4e:d7:
3e:f3:f6:e2:32:ec:32:39:ba:a1:1c:9c:d6:f1:39:
55:3f:b6:ee:7e:06:83:bf:27:4c:df:1b:d6:fb:f3:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:E5:FC:AE:3C:36:30:3F:98:6C:12:0C:5A:5C:18:1D:47:C6:D9
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:df:42:86:35:c0:a7:4c:35:9d:3f:1f:bd:52:d7:e9:af:da:
12:c8:d5:c7:a6:fc:f7:9e:ef:e4:88:bf:60:d3:23:78:e3:63:
43:df:cf:d7:f1:5c:f1:d2:82:ab:05:8c:4b:57:2a:d8:77:9a:
39:10:a0:93:04:df:ac:cb:00:a5:b1:54:f2:19:0d:94:53:74:
66:51:d0:21:b6:da:6b:99:86:df:fb:70:36:ee:36:06:e4:1b:
b3:d5:c0:1e:f3:af:5e:b4:b6:ea:80:66:d1:34:20:eb:29:b7:
8a:96:86:fe:33:08:2b:28:cd:66:0c:a4:d1:33:41:66:f9:b5:
10:8d:fa:55:6b:ca:03:ff:52:c8:67:48:7c:62:26:4c:b8:f7:
c2:72:81:5b:82:ee:e9:f0:6b:51:98:52:79:c9:66:8e:0f:ec:
9d:20:bc:5d:8d:bd:f7:1f:f9:b9:9a:0b:fc:2d:22:7d:3c:fa:
3c:1b:72:29:90:2a:bc:0b:a9:be:0d:da:98:7e:51:a1:fe:25:
86:37:68:da:d5:ce:87:38:26:97:da:01:81:79:44:a1:26:00:
9b:7c:65:0d:46:b2:8c:e1:b9:ca:68:fd:63:df:ab:35:65:cf:
dc:bf:53:d9:a9:d5:9f:43:9a:8f:a5:b4:ce:83:aa:1f:09:fb:
aa:18:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:28 2025 by rpki-client