Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: 8mEBo2V7yJG8oMwF1dqHgJim5jacDlQuNpObH9Hnwgk=
Subject key identifier: 5D:30:DB:70:7B:19:70:E2:A6:D4:D8:2A:BD:EB:E4:A7:B2:5C:F0:91
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 0199239FF1414C1C2D969C86D158C972953E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:48 +0000
Manifest this update: Sun 07 Sep 2025 10:01:48 +0000
Manifest next update: Mon 08 Sep 2025 10:01:48 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: Y8WMScbIIcNo+B5by31+pkVFC/MYXaQ79YTAvftKi9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f1:41:4c:1c:2d:96:9c:86:d1:58:c9:72:95:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Sep 7 10:01:48 2025 GMT
Not After : Sep 8 10:01:48 2025 GMT
Subject: CN=5d30db707b1970e2a6d4d82abdebe4a7b25cf091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:f5:69:7b:84:49:34:44:63:48:03:80:65:
96:9d:6c:6a:14:09:a0:09:1d:61:0c:ca:b0:e0:ee:
b7:e5:df:25:ee:21:c9:17:85:4a:3d:c1:7f:1c:f6:
3a:20:d8:21:4b:36:ec:7d:66:6d:ab:23:17:03:aa:
f2:fd:42:b0:eb:ab:41:41:00:77:09:bb:a4:37:91:
c8:fa:66:7e:63:90:92:b4:25:e1:5a:10:3d:e9:c1:
7b:dd:f1:1f:25:e6:15:db:e7:27:1d:2d:6d:8e:7b:
c5:1b:7e:a9:94:0e:66:d6:74:d7:ed:26:9a:f4:6d:
03:f1:f2:28:61:cc:41:13:0f:54:38:01:56:f9:d0:
25:3d:8f:e4:0a:18:8a:b8:dd:e8:1e:32:64:21:b2:
b4:81:f4:dc:6d:79:24:4a:92:6f:0b:49:56:be:52:
2d:70:51:d8:bd:be:5b:a1:da:b3:63:6d:18:db:47:
d9:a5:fa:ef:66:1d:d8:10:e5:1c:25:c2:07:4f:b3:
f6:02:9f:25:93:c4:a6:3a:47:16:60:71:08:e9:57:
07:03:c2:8b:46:4d:1d:80:03:9a:a3:d3:06:c1:62:
c2:c3:80:76:62:1d:93:89:e2:e5:d2:f7:19:33:44:
92:4f:86:91:d2:0e:ec:d1:5b:27:08:ff:b9:dd:79:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:30:DB:70:7B:19:70:E2:A6:D4:D8:2A:BD:EB:E4:A7:B2:5C:F0:91
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:da:4e:7c:4d:f6:33:49:ab:3b:e1:96:5a:dd:37:83:a7:
0a:7c:cf:af:36:d7:39:7d:6c:05:fb:0c:1f:c2:aa:fb:ee:12:
0b:05:54:82:5e:b1:e0:a4:c6:ef:65:32:55:9b:95:22:50:41:
b5:a0:87:32:77:34:21:71:4a:d1:35:46:24:8f:9b:8f:8b:2c:
32:4e:ac:9d:ad:81:d8:ab:fc:ea:e2:27:16:07:4f:a4:e9:d0:
7a:4f:58:60:26:87:4f:85:a3:43:10:32:68:f0:59:fa:b2:cd:
f8:76:38:b8:04:a1:0e:e7:c5:72:22:a3:47:c2:c8:39:02:02:
1a:03:bc:0e:b3:26:d6:fd:e9:c8:dd:29:3c:f7:3c:1d:36:e3:
12:d3:bb:4f:4f:a4:7f:0a:b3:bc:48:76:81:72:b0:5f:cb:b4:
68:bf:3c:4f:34:9b:e0:bf:ae:b1:c9:e2:87:19:e8:2c:80:e4:
21:ae:ff:8a:aa:b2:56:c7:ed:c0:72:e7:a6:1e:e0:79:13:c0:
2b:8b:c9:f9:8c:28:ab:50:c9:14:5a:d2:24:bf:04:3e:dd:48:
9c:c1:0b:ae:cc:68:67:3a:ef:85:d4:a6:9f:0f:6f:4c:59:25:
aa:4e:05:6c:e6:89:e2:1f:a1:f6:56:88:3f:d6:83:a8:3d:8a:
a3:f2:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:48 2025 by rpki-client