
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: wzhq6HF4nQprQ5MqnOEI8vyFjiHFSEE9k1mWoSTNNQw=
Subject key identifier: F4:65:87:C6:4E:30:C1:16:7D:4F:49:D2:ED:1B:98:8C:DE:9B:D4:B6
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019921E795D1DCC48CECE57A0584EE2669E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 15D3
Signing time: Sun 07 Sep 2025 02:00:49 +0000
Manifest this update: Sun 07 Sep 2025 02:00:49 +0000
Manifest next update: Mon 08 Sep 2025 02:00:49 +0000
Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=)
2: DNQ27-wMGyHRJznmj_NiTRlshdw.roa (hash: 7eRIlCQXKapS5hASd5HYvFv5nYUj1J9UY9kquzW77gc=)
3: SEMQLfPoFtmMG9uMdSXJeyNo3nk.roa (hash: ZD2o8n/XFRcCzyhjjBouPx+0N/ySWQHovrDaz6PBT8Q=)
4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: QL8OeLdHvnUtu729ky+f67pODUlx5yAtfQ4KSQcJ5rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:95:d1:dc:c4:8c:ec:e5:7a:05:84:ee:26:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Sep 7 02:00:49 2025 GMT
Not After : Sep 8 02:00:49 2025 GMT
Subject: CN=f46587c64e30c1167d4f49d2ed1b988cde9bd4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:29:a0:ee:b4:f9:12:48:c4:3f:ad:45:e9:
fc:13:ad:00:26:71:7c:dc:68:be:4f:94:01:0b:c8:
0b:f8:2f:6e:e9:d8:7c:a9:66:50:94:67:b5:7d:ff:
11:ef:1e:05:6e:86:2b:96:77:cd:e3:d5:27:6f:d6:
41:56:5d:89:bd:02:9a:7a:fb:02:1d:f2:a6:b4:19:
6b:be:19:7d:4b:e8:00:7c:43:2e:7f:ce:3a:e9:82:
51:0c:eb:c1:d6:c1:b9:88:13:89:04:49:dd:72:a2:
69:68:1f:ae:d8:29:52:43:71:ac:af:bb:96:0c:85:
c4:13:14:cc:d5:e2:90:fc:73:2f:0f:83:0e:4c:f7:
ea:0e:16:e4:89:25:35:8f:b2:cc:23:26:d4:5f:a6:
16:e1:d7:bd:f9:05:06:f1:f1:a9:bb:41:e7:1a:2c:
e3:19:c9:fa:32:9e:af:96:c1:55:bb:ca:ca:dc:5b:
03:55:e0:c1:7d:6f:ff:62:15:16:20:20:98:45:70:
6f:a8:be:df:b0:c7:f2:67:af:6b:96:04:11:c6:55:
ca:e0:5e:8c:95:14:72:8a:b4:c7:85:a5:54:7f:a8:
b9:c9:39:92:24:99:7a:87:ea:b2:8e:c6:3d:c9:90:
02:a8:fa:39:d3:4c:38:ca:6f:f8:b8:be:e3:46:02:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:87:C6:4E:30:C1:16:7D:4F:49:D2:ED:1B:98:8C:DE:9B:D4:B6
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:7b:27:a7:13:1f:7c:9a:71:72:32:99:57:82:d9:8d:dd:
69:55:d4:6c:bd:5d:0c:a6:c8:54:f9:9c:9e:4b:7e:a8:f7:4d:
e2:40:cc:af:fc:f1:33:45:b1:ea:76:00:97:e0:1e:b9:b3:f8:
f3:55:cd:b4:42:ec:dc:27:76:81:ee:59:11:62:1e:94:09:5c:
9d:d2:a6:48:7a:8d:81:39:af:d6:49:46:df:cd:32:90:32:3e:
52:cd:df:85:ad:b1:46:bd:21:fe:41:1b:2a:44:48:28:54:ee:
1a:86:ce:d2:31:c7:f9:f0:c5:f2:7d:7d:80:58:f6:70:37:34:
42:80:de:ee:b1:e6:2d:d8:49:b7:13:4d:96:84:09:aa:fe:65:
6e:5a:55:d1:1d:40:a3:bb:0a:99:c7:cf:ba:93:23:ac:a4:83:
19:81:3a:c2:b5:34:c8:c6:40:b4:3e:ed:d2:bf:a3:66:2d:ac:
7b:6f:0b:85:07:a1:56:86:89:ae:ca:9e:d7:16:27:f8:a2:e5:
23:aa:f3:18:44:81:47:b2:b2:b8:14:ab:fd:18:46:b0:7c:0b:
e5:f6:58:85:72:9b:3d:89:d2:85:1f:f2:34:e9:18:83:01:b3:
18:2d:16:11:9d:e0:d9:d9:7d:44:f8:dc:a3:07:e1:e5:07:4a:
13:af:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client