Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: PRujaYh83toKREBHvivsw9ERZUhuFosLh6GX50wdXoA=
Subject key identifier: 56:98:AB:97:07:EE:9E:A4:4B:E6:58:4C:02:55:85:38:DE:FC:DF:5D
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 0199228C85B96ABC21E62F632D3CAEDFB27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 067E
Signing time: Sun 07 Sep 2025 05:00:58 +0000
Manifest this update: Sun 07 Sep 2025 05:00:58 +0000
Manifest next update: Mon 08 Sep 2025 05:00:58 +0000
Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: Mu4sjpyJCSOzn/tp2VQ0/fZ9MuosiaWSD8DacHVIpwc=)
2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:85:b9:6a:bc:21:e6:2f:63:2d:3c:ae:df:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Sep 7 05:00:58 2025 GMT
Not After : Sep 8 05:00:58 2025 GMT
Subject: CN=5698ab9707ee9ea44be6584c02558538defcdf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:e9:38:ea:55:23:7d:62:da:45:37:5f:00:
76:1b:84:a3:64:b7:ea:23:b4:41:37:12:51:2f:42:
11:13:78:e0:2e:a0:33:a2:0b:c5:f3:43:26:54:77:
67:d6:e3:bd:7a:8f:0f:b9:a6:52:00:90:d7:fa:52:
75:61:cd:30:2e:01:dc:ac:13:03:c3:f7:06:51:33:
5f:78:56:03:05:af:ac:af:fb:b1:4c:a5:6a:ab:e6:
d3:5e:bd:86:d1:c9:70:da:58:23:bf:d2:2a:7a:5e:
6b:fc:d2:dd:8c:c8:f0:2a:b5:ab:e5:eb:84:42:60:
c1:04:fc:09:3c:fc:78:5f:7a:c8:90:f0:9a:c0:00:
62:86:db:b0:a7:a8:6e:74:8a:34:d2:ea:dd:bd:4a:
c8:4e:a6:ca:f8:04:38:a7:5f:0d:3c:14:37:e7:f5:
27:60:f9:d5:f8:9c:87:b7:bf:79:dc:b9:57:a2:11:
91:ea:c4:79:e8:07:82:5a:39:ab:82:38:1f:7b:9a:
bf:42:53:fc:99:5b:2b:9d:42:87:7c:57:ba:a7:27:
d0:f2:d8:70:ec:5f:ae:d5:0f:35:8a:61:8f:ad:cf:
02:7f:d3:b6:eb:b4:89:23:d0:e0:e4:3e:f6:0b:aa:
c2:51:ab:77:c2:26:0d:39:63:18:f8:1a:b3:7b:50:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:AB:97:07:EE:9E:A4:4B:E6:58:4C:02:55:85:38:DE:FC:DF:5D
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9f:19:5b:e7:c6:61:e1:77:14:10:86:7e:49:9d:d8:8b:da:
c0:14:03:7a:16:31:2a:af:b7:2b:29:8d:62:5a:19:59:0d:26:
30:80:b0:4d:8c:c1:58:f4:a5:42:8c:a1:64:2d:4b:b6:52:3f:
91:41:ea:a9:07:f6:a2:18:05:be:91:7b:99:b9:02:b9:f5:99:
a2:84:6e:09:2a:c5:b8:8f:5c:32:a0:09:6e:ae:c2:1d:0d:47:
12:de:48:e7:f0:58:1a:90:af:ad:1a:7c:dd:b7:fb:fa:57:f2:
70:0c:42:d3:ea:d9:8c:d4:f8:87:84:04:5b:98:2e:81:67:52:
ec:a7:0d:3e:15:f2:62:74:d2:e1:0e:58:51:26:da:65:f9:aa:
a1:f2:09:fd:fd:53:0a:1d:74:1e:d2:be:b2:7f:4d:15:b4:8f:
91:2f:0c:59:52:21:bf:fe:f8:6c:3a:95:1b:5c:30:03:da:e2:
fc:99:26:86:9f:78:b5:7a:02:32:6c:36:7d:2b:e3:47:79:46:
6f:f9:fd:b5:c8:31:05:57:8f:1d:ea:4f:5f:d1:8b:69:1d:86:
17:8c:47:90:5f:e2:5d:fe:69:f9:7a:b6:5b:e2:aa:25:0d:cf:
90:ef:8a:59:94:08:1d:74:77:35:b0:b1:c3:6d:bf:3c:32:31:
10:29:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:26 2025 by rpki-client