Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: QrrWOeFVu2xxs1PVG8v95i461ynP6Uj+9qRfm1RSonA=
Subject key identifier: 8E:89:68:0E:DD:61:C9:7E:EE:27:3C:DA:36:F4:B0:F5:D9:81:CF:6C
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 019A1B3DE34D8071F5AEB45859C32ADB9197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 0B67
Signing time: Sat 25 Oct 2025 12:00:31 +0000
Manifest this update: Sat 25 Oct 2025 12:00:31 +0000
Manifest next update: Sun 26 Oct 2025 12:00:31 +0000
Files and hashes: 1: fhqhrm_dY2gYWI5oCp04pibtM_o.roa (hash: s8FH9ikZ8P5QdYR5uDaZwWuPJb6gYAb8hHHjeN9RXKc=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: fmyC6v13qMw6+d6EYTNS0CYPre6aU7C9O1o5XOAbNMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:e3:4d:80:71:f5:ae:b4:58:59:c3:2a:db:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Oct 25 12:00:31 2025 GMT
Not After : Oct 26 12:00:31 2025 GMT
Subject: CN=8e89680edd61c97eee273cda36f4b0f5d981cf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:6f:17:89:8b:d0:92:fe:fa:e8:c6:f0:be:
55:de:b7:27:d0:b8:4f:82:2d:3e:b6:99:ec:a4:49:
3e:cd:48:5c:9b:65:81:26:c7:5e:36:0a:9e:02:7d:
3f:a1:cb:b2:96:90:ce:80:a0:09:66:79:d5:80:0d:
33:8b:45:34:ca:92:d1:1f:85:53:b7:38:fa:fd:0d:
6f:d1:e1:7a:89:44:d0:ef:09:fe:9f:75:7b:13:d3:
dd:18:b7:95:32:ec:2b:03:81:6b:dc:97:4f:89:f9:
8e:61:bb:27:fd:36:87:fe:23:ee:8d:a6:92:ce:a8:
20:cf:f3:89:8c:ac:f3:4f:37:f6:1e:bc:0f:78:03:
d3:1b:87:6a:43:5c:45:9b:f0:3b:f3:cc:33:80:3f:
20:fd:08:2a:2a:c2:fa:d8:7a:cc:6b:00:18:34:5a:
49:3b:b1:f3:90:87:96:6c:5a:37:a6:d7:1a:c4:72:
5e:f0:69:0d:0f:75:bc:90:5a:61:44:78:48:01:be:
9f:05:2c:bb:2b:f5:79:66:22:8a:2f:15:16:e3:32:
d2:ea:e0:72:e7:03:c7:d9:67:38:87:18:a3:d2:75:
d6:50:60:fb:79:86:fb:b6:59:9a:e2:13:e6:73:5e:
69:3c:e7:6c:c0:a4:5f:ff:85:ab:88:b2:09:eb:21:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:68:0E:DD:61:C9:7E:EE:27:3C:DA:36:F4:B0:F5:D9:81:CF:6C
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:44:a9:58:b1:36:62:1c:62:4e:f7:e7:00:a3:6d:e0:30:
2b:93:6d:d5:da:c7:c7:95:28:2f:1c:2f:4d:7c:c1:1a:24:62:
47:57:ef:df:cf:3a:ef:d3:37:c6:d6:6c:32:36:18:9e:c0:2a:
cb:5b:8c:1f:11:39:8b:6f:a3:cd:4a:d6:32:cb:92:8a:00:9f:
28:0a:d9:1e:d5:17:f5:2d:9d:36:2a:a0:d8:2f:49:b4:9b:70:
8d:41:4f:6a:6f:e7:ee:92:cf:88:d1:03:8c:c2:31:ed:dc:b1:
04:78:3b:7f:10:54:7a:c6:37:c9:c3:3c:44:b8:98:be:a1:bc:
34:f0:d2:c8:d7:ec:ba:22:33:55:42:4e:5a:07:56:3a:81:19:
29:12:35:74:3b:fc:65:8c:31:0a:9d:c1:c1:5d:de:b7:70:ac:
4a:f4:63:b2:d4:a5:24:9c:f9:4d:49:30:d5:04:ec:4f:0a:07:
a7:5f:a7:15:1e:ce:8a:aa:c4:c4:9f:24:b0:42:e1:26:88:1c:
4c:ac:4a:86:72:cd:83:96:eb:4c:1d:d9:cd:78:58:42:4f:96:
5b:2c:6f:e7:c1:f6:21:25:e8:75:63:e1:6b:37:c8:21:af:b5:
03:ec:c8:36:c9:7f:90:3e:70:8e:fe:59:59:b6:dd:60:2c:33:
bc:82:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:01:15 2025 by rpki-client