Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: PEQEGWDEMyitFEqG5U17LC+0PjLPsGh72sKkbIqIoyM=
Subject key identifier: C2:B4:BD:57:37:F3:2D:7D:03:14:C3:61:29:ED:BB:C6:84:A3:45:DA
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019922FA6E1A5C32C4B096F3058213E6E404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 12DF
Signing time: Sun 07 Sep 2025 07:01:01 +0000
Manifest this update: Sun 07 Sep 2025 07:01:01 +0000
Manifest next update: Mon 08 Sep 2025 07:01:01 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa (hash: 2dIpFoPyA8jItE82jeKy7Ii+7GgLwrgqHDUnlv82DBU=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: mHNkbBJC4fp51+wxEpjHYcYWV7f9RvG5UDV33KqLxXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6e:1a:5c:32:c4:b0:96:f3:05:82:13:e6:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Sep 7 07:01:01 2025 GMT
Not After : Sep 8 07:01:01 2025 GMT
Subject: CN=c2b4bd5737f32d7d0314c36129edbbc684a345da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:ad:08:f7:0f:62:23:ee:8e:ff:9f:d9:56:
e3:c9:7e:13:b6:91:6b:f9:47:cc:7f:18:69:d1:2f:
fe:c6:b6:9c:fa:e2:e8:df:06:07:42:ed:8d:2b:f4:
08:66:4e:ed:5c:c4:12:a2:03:e4:57:75:cf:8c:c0:
e7:d7:e8:06:f3:4a:c6:13:c6:c5:a5:f1:c1:4d:8b:
c7:10:7d:37:ab:08:0e:31:43:c4:66:61:d3:5f:8a:
c7:4a:c6:27:ab:9f:27:5f:10:05:34:96:2c:21:ae:
a6:b5:68:d9:34:55:0e:89:b3:80:1c:cf:ae:7c:4a:
b9:eb:8c:6d:32:71:81:fd:05:5b:56:07:4e:0c:f3:
91:51:da:8a:26:ce:32:ec:e2:b0:a0:c4:6c:59:81:
01:56:6a:f8:8d:ff:1a:b8:dc:7b:8a:99:a3:83:85:
ab:db:28:d3:c5:c6:72:92:18:d2:33:f2:cf:fd:4a:
81:c8:9b:7e:6b:86:62:e7:f5:e0:63:e1:1e:4c:2d:
77:a7:e7:e1:29:71:b6:65:df:e2:75:63:d5:0d:0d:
f7:b7:ba:2c:7a:f6:cd:13:7d:3f:c8:78:70:f1:28:
c2:a7:cb:97:a1:08:32:ed:9e:b5:ed:34:05:ee:bf:
12:7c:5f:e4:48:86:07:d8:c7:19:5e:e6:1c:92:be:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:BD:57:37:F3:2D:7D:03:14:C3:61:29:ED:BB:C6:84:A3:45:DA
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:06:60:3a:d4:fb:a5:41:4b:58:dc:7f:b3:76:df:d6:70:56:
ea:28:9a:2a:b7:92:72:59:ed:59:05:5d:b7:93:7b:8a:0c:56:
27:2e:54:f3:f5:38:41:82:a1:03:62:ce:c5:6b:52:d3:41:dd:
9e:57:22:09:84:a9:0f:f4:79:97:fb:d1:ee:d2:ed:dc:99:da:
19:9c:31:2f:f3:94:1c:c0:d3:cc:17:c1:ff:5f:e0:6d:f6:fa:
eb:95:8e:00:4b:17:df:4c:89:a6:d3:3d:64:3f:b8:e1:f0:1a:
80:4e:b1:ce:c9:84:fa:58:84:89:78:e0:d6:12:c9:12:3b:34:
75:83:d9:f8:ac:ef:fc:2e:3f:90:33:1e:8d:e8:da:cb:41:22:
17:56:5c:ed:88:8f:f2:41:1e:51:9a:cc:af:b6:1b:af:2d:c8:
b2:12:79:40:60:4e:ea:bd:ab:aa:cd:b6:61:c2:15:eb:62:d9:
50:b6:aa:5a:5d:ea:87:d7:16:2d:6b:42:02:04:a6:fd:5f:d9:
42:fc:40:b4:3c:2b:6c:51:c4:2d:9c:2c:60:67:8b:30:9e:fd:
92:a9:8f:1c:d8:64:cb:cd:da:48:ac:6d:41:00:90:27:47:98:
f1:c5:53:35:be:15:ae:5a:fb:a0:37:2c:b7:9a:df:fd:76:13:
22:4f:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:20 2025 by rpki-client