Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: Al36FNiINROujDdo6xZFsLu93WXjhopFpkrSHwJ0sWE=
Subject key identifier: 8C:68:69:BF:A0:45:8C:7C:DE:9C:0F:7F:17:3D:BD:9C:5A:B3:46:EA
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 0199239EDF3F3D2E58E8776425257F84B8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 1550
Signing time: Sun 07 Sep 2025 10:00:38 +0000
Manifest this update: Sun 07 Sep 2025 10:00:38 +0000
Manifest next update: Mon 08 Sep 2025 10:00:38 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: PO4ctHJJ3D6ST2JXBM2XcW4ZVl6a7jcjQoAbteJk+IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:df:3f:3d:2e:58:e8:77:64:25:25:7f:84:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Sep 7 10:00:38 2025 GMT
Not After : Sep 8 10:00:38 2025 GMT
Subject: CN=8c6869bfa0458c7cde9c0f7f173dbd9c5ab346ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:8e:91:9f:9a:9f:70:44:47:da:ea:af:7b:
6e:ce:c2:d6:a8:e1:9b:58:89:52:64:76:1c:8c:de:
52:ce:f3:13:74:a3:3d:c7:81:25:f1:b6:d2:71:1d:
08:81:ae:39:5d:fb:46:bd:6d:d0:3f:f6:67:43:cd:
43:78:6c:22:5c:0e:08:17:6c:53:04:fc:37:95:46:
8a:b7:b2:e2:74:d7:04:24:a0:f6:36:27:ef:5d:e7:
ca:e0:1f:83:06:9e:ae:23:5d:0e:36:87:2f:a4:5b:
82:54:64:d6:cf:5a:28:50:d4:20:70:b1:fb:52:65:
53:57:6d:71:8e:51:e2:5e:19:12:ae:f2:59:95:23:
88:9c:9c:34:5b:a9:46:38:11:73:b5:c9:0f:ca:e1:
85:6f:6e:58:9a:ee:d2:31:89:6d:f8:81:65:f5:a1:
85:92:1f:90:c8:03:fc:a2:82:ed:67:13:b4:26:7e:
35:91:5a:b3:1c:f9:47:d6:6a:65:c7:34:bc:ee:70:
6d:03:a6:fa:7b:07:d0:fd:26:c1:7b:17:3d:7b:f9:
06:7b:4a:25:4a:94:a3:df:33:fc:a9:88:c3:21:64:
b0:10:9a:b1:30:50:65:f7:78:5a:40:f7:09:be:8e:
7c:4b:be:20:a4:c1:d0:a7:c7:c2:f0:ff:21:67:e5:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:69:BF:A0:45:8C:7C:DE:9C:0F:7F:17:3D:BD:9C:5A:B3:46:EA
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:48:07:13:c3:ef:ce:0b:13:de:da:be:f3:65:9e:31:bd:
65:ba:d2:e3:0b:24:60:7f:3d:03:58:95:19:46:32:cb:73:0d:
ae:35:b2:b8:6d:90:87:89:91:64:02:75:9b:cd:07:4e:ff:44:
99:89:81:cb:63:22:94:a2:eb:38:b1:66:98:a0:70:d6:df:a0:
54:43:33:b4:21:e2:a8:d8:1e:b8:eb:97:b4:9c:e3:9f:93:97:
bb:db:52:81:0a:9b:51:8c:53:e0:5e:cf:8b:17:15:15:62:03:
29:96:84:c2:c4:9c:e9:c2:4f:c9:c7:9c:03:5b:f3:89:af:53:
de:92:f9:8c:0a:0f:82:e6:9e:e5:5d:e9:61:d1:bd:31:3d:b1:
18:3f:78:fe:07:5d:c8:39:d0:32:a2:a7:fb:6b:bf:78:1d:3d:
70:7a:4a:d9:80:3a:9f:a3:38:79:6e:74:72:6a:38:33:68:13:
3f:c4:9d:0b:e6:08:99:e8:6e:e4:c6:3f:e5:b1:3e:85:52:73:
d5:59:52:59:d8:f7:e4:78:8c:74:57:53:f3:74:2f:f3:51:f9:
6c:36:7c:b8:cf:9c:22:5e:86:e9:cc:a1:21:f2:3b:22:4a:9e:
45:32:f0:f7:1d:d4:9f:ba:47:6b:42:a8:1b:20:1a:c8:40:d1:
6e:1f:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:20 2025 by rpki-client