Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: zTsVV96cmQLuGwCZaPvxGf91vs9l7B8A3jfciTivNS8=
Subject key identifier: BD:90:3B:38:1B:11:0B:E8:D1:5B:B8:C9:07:5A:AD:F5:5C:BA:A3:26
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 019933B722291869D3E904E76CE51F26DDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0F8A
Signing time: Wed 10 Sep 2025 13:01:03 +0000
Manifest this update: Wed 10 Sep 2025 13:01:03 +0000
Manifest next update: Thu 11 Sep 2025 13:01:03 +0000
Files and hashes: 1: GWLdQp63HdvOf4msAVGTJwa7Pc0.roa (hash: lF9IocpGAD+RCCazxV1bkIzHwzFIWOektkqyFGjVilw=)
2: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
3: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
4: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: rn/2xC8aK77rZ1ikQQspbocIMwHfkutmB7RAtankJhs=)
5: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:22:29:18:69:d3:e9:04:e7:6c:e5:1f:26:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Sep 10 13:01:03 2025 GMT
Not After : Sep 11 13:01:03 2025 GMT
Subject: CN=bd903b381b110be8d15bb8c9075aadf55cbaa326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:ad:f4:b5:be:8c:fc:5c:f5:08:b4:c2:18:
bd:3c:08:7d:ad:cb:e4:a8:a8:aa:ae:38:f4:4d:97:
c3:94:77:5d:99:f4:4d:44:7a:3d:a5:43:5f:83:91:
f7:b0:80:ad:03:7e:de:63:49:a2:ba:40:2b:04:f3:
f9:51:c8:c3:fe:2d:75:54:70:95:cb:a8:97:a5:26:
e3:35:55:b1:8e:c4:e8:91:51:bf:12:d8:a4:0f:a6:
e4:99:8f:40:c8:21:70:d1:8d:c9:0d:3e:44:40:21:
e5:b3:06:57:8f:e5:27:7c:48:85:6c:e2:71:0e:c0:
19:91:22:79:e3:bc:da:62:0e:f7:a0:d1:56:5f:ad:
53:ff:55:59:df:5b:3a:28:d0:35:5a:55:7a:8a:42:
bd:16:de:80:01:4e:4e:3c:02:cc:39:e3:04:61:2f:
db:1d:93:cd:1d:33:4c:90:84:f8:43:b9:70:0d:94:
22:65:ff:f8:df:b2:d9:9b:46:8d:8f:51:15:d3:87:
d4:e9:7c:47:0d:2f:f4:ae:fe:0c:66:46:a6:43:2b:
aa:93:44:ea:9c:ab:05:12:a4:c3:14:db:6f:e4:04:
dd:a5:65:cc:29:fe:bd:c8:da:4d:53:e3:6a:be:5f:
8a:c7:d7:4f:6e:ee:9e:63:ff:b8:ed:46:14:d7:76:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:3B:38:1B:11:0B:E8:D1:5B:B8:C9:07:5A:AD:F5:5C:BA:A3:26
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d8:8c:24:8d:f9:a1:8a:12:4c:01:79:86:6c:44:a2:ae:06:
8f:be:99:22:ef:02:f1:26:62:aa:ec:8d:f1:4c:16:47:86:78:
fc:34:af:f4:2b:de:93:62:c6:09:70:c1:68:13:ca:c8:6a:6f:
5f:a4:28:bb:3d:53:b2:02:81:e6:f9:64:5e:6d:97:00:17:4e:
42:33:bb:88:c8:05:15:52:ca:4e:50:92:3b:32:91:6c:d9:74:
13:3a:78:36:86:74:25:17:5a:d1:27:72:90:05:f7:7f:73:16:
fe:60:40:de:5f:d1:20:10:2d:a2:29:13:9d:4f:53:0d:63:b6:
cf:1c:39:d1:70:35:47:24:1b:fd:0b:1c:34:4e:ce:98:a6:ae:
8c:9e:8a:ee:31:7f:d2:f5:a1:7d:a9:6c:4f:4f:ce:94:04:58:
8b:66:fe:ea:39:4f:e5:c5:a6:ae:2e:e9:1e:ef:a5:79:73:c3:
18:aa:22:d0:39:98:79:41:33:eb:10:64:37:1e:1c:3a:2f:be:
4f:40:4c:65:c6:e7:ca:64:bb:81:2a:0f:10:2e:87:57:9a:6b:
c9:03:0b:7a:38:6c:bc:55:c6:e1:d9:8a:93:1e:da:ec:fa:a0:
98:d8:fd:0d:d0:a5:75:b7:8a:7a:69:2a:13:dc:18:37:3e:01:
22:8a:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:46:55 2025 by rpki-client