Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: VAFsKQYJfc2T+sR5vyOAel9AO+iyaFd2fAi9c/oWsEY=
Subject key identifier: 29:AF:73:81:0B:AC:88:37:2D:D5:11:73:AC:DE:A0:B8:5A:E9:E6:DF
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 0199247AAD79550C8DE5C4F5C5331DE1A6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 14:00:43 +0000
Manifest this update: Sun 07 Sep 2025 14:00:43 +0000
Manifest next update: Mon 08 Sep 2025 14:00:43 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: u9VqVpQPBCWlSppq8LNiW2wPkgB6s9rLL1j4/b9vSxQ=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7a:ad:79:55:0c:8d:e5:c4:f5:c5:33:1d:e1:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Sep 7 14:00:43 2025 GMT
Not After : Sep 8 14:00:43 2025 GMT
Subject: CN=29af73810bac88372dd51173acdea0b85ae9e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:a6:e9:d0:f8:63:44:48:9e:30:37:fe:a0:
04:c5:62:ad:8c:0c:6e:e6:9c:25:30:15:00:65:bb:
0b:f8:28:31:09:08:ec:ef:f4:21:88:e2:60:bb:b0:
97:10:58:34:eb:24:1c:28:0c:13:47:61:7e:49:a6:
16:6b:8c:14:0d:95:8f:36:ce:c5:4d:b5:40:56:18:
73:f8:e2:b5:19:65:f7:47:1c:77:c4:9a:32:69:15:
09:21:de:10:07:89:6b:bc:4d:cd:9b:8a:bb:a6:3f:
38:c5:98:95:99:22:43:88:71:43:d5:ad:1f:3d:c2:
02:ea:ff:fd:9f:9c:52:1a:08:5f:2b:d0:69:35:44:
7b:7b:3e:dc:5e:0b:88:41:19:3f:bf:0c:36:7f:35:
4f:92:43:9b:f5:10:fb:ff:30:e0:b4:61:2c:7b:a1:
1a:d6:ba:c2:46:f7:d8:75:fb:85:32:50:ab:fb:6c:
01:6e:a2:49:10:21:92:64:d9:fb:f5:4c:8d:ab:f6:
ac:83:9f:7f:42:5b:aa:4f:ea:1b:97:ec:6a:d7:94:
e0:78:dd:61:28:54:78:18:c2:cc:60:a5:bf:03:d4:
18:4c:53:a0:21:3d:18:17:fb:d3:e9:7a:ac:fc:12:
4f:5c:50:e9:b3:6a:e2:92:ff:d9:50:0f:34:19:9f:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:73:81:0B:AC:88:37:2D:D5:11:73:AC:DE:A0:B8:5A:E9:E6:DF
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a9:6e:e1:64:96:2c:25:4f:3d:50:c5:4a:69:67:7e:cc:59:
87:65:72:ca:e2:69:3b:07:72:cb:db:c9:a0:6c:47:2c:02:4b:
97:cd:de:12:40:50:37:1f:27:eb:cc:ee:2c:62:91:d0:99:8d:
7d:4d:f6:f6:1a:df:d4:93:ee:11:2c:4c:c2:a3:bd:81:55:d2:
bb:64:db:b2:af:b1:3c:10:16:0f:ad:d0:9b:cf:31:2e:7f:0d:
73:9b:77:47:93:33:eb:da:b8:65:b3:1f:b1:63:a8:ae:94:94:
b0:1f:a0:6c:aa:91:7c:0e:9b:29:e3:cc:d8:ee:90:51:39:2a:
e3:39:cb:2c:e0:0c:1e:bb:ea:61:64:ac:0c:20:49:67:38:09:
20:72:94:76:63:6a:18:4d:7e:bc:84:bc:77:52:6f:d0:10:12:
69:62:aa:9d:c5:d6:63:92:e1:4f:7f:1b:ca:90:c9:8c:23:9f:
09:1c:90:71:21:07:bf:0b:75:b1:e2:e8:1f:fb:b6:c0:30:de:
be:78:15:65:32:25:08:c3:51:0d:30:1c:1b:29:a5:6d:9a:3d:
73:3d:d9:3d:2f:7a:e0:7f:99:3e:5a:04:d9:11:b1:ac:a5:9b:
80:e3:6f:55:60:87:54:1a:43:24:c6:01:4a:a4:ce:21:e8:40:
0d:b3:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:16 2025 by rpki-client