Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: D9R3h8eWjv1DokwfXLIm0inzIGYqW0asyvT7qMk/usU=
Subject key identifier: A8:D4:C7:2B:B1:C1:6E:8D:52:B9:FE:08:9C:2F:41:CD:1A:47:BD:E3
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 019921B21EF7F53B63AAADC0F32E23C699E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:25 +0000
Manifest this update: Sun 07 Sep 2025 01:02:25 +0000
Manifest next update: Mon 08 Sep 2025 01:02:25 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: M8N+wNmMaYDqoXxXTevxWT/6TX2gWwvimFv8HYzXgNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1e:f7:f5:3b:63:aa:ad:c0:f3:2e:23:c6:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Sep 7 01:02:25 2025 GMT
Not After : Sep 8 01:02:25 2025 GMT
Subject: CN=a8d4c72bb1c16e8d52b9fe089c2f41cd1a47bde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:cd:14:01:c0:a0:b3:10:64:1e:ee:d6:93:
c6:a6:3d:bd:61:6e:5d:52:a0:52:db:b8:e4:d7:11:
5c:e7:9f:ab:cf:07:b6:e1:5a:63:74:66:82:ff:5a:
0f:c1:66:db:b9:51:a9:11:2a:d3:fb:68:a5:77:f7:
45:62:6b:a5:fa:92:73:32:cd:ed:b0:71:c0:00:6b:
b8:c7:26:b3:f2:f9:97:20:71:14:c4:5a:73:16:4a:
60:53:59:ea:d8:52:b7:1e:f7:99:e1:e7:7f:24:2e:
dd:0a:8c:aa:95:92:b8:1d:47:f7:79:10:2f:0c:7a:
3c:d2:d1:ad:7f:d4:e4:22:bc:df:ed:9b:1e:dd:14:
9c:9d:aa:b7:b9:a7:06:65:e5:11:0c:f6:0a:dd:cf:
3f:76:63:f9:05:0a:76:45:2d:14:19:63:32:6a:b8:
46:9f:39:8f:45:aa:9d:c6:bd:e2:8e:d5:1a:e4:e9:
78:80:0f:3b:2e:1b:84:14:5d:46:33:f2:6f:41:29:
02:16:8f:b6:19:c1:e8:88:ee:c4:38:8e:71:ad:51:
2f:2c:5b:ca:f0:e3:3a:6f:39:f9:a1:0c:18:da:13:
64:a1:4c:b3:f9:8d:21:57:d0:aa:b2:38:37:e8:a0:
27:19:51:41:6a:24:1d:21:ad:0b:f5:f2:e2:36:9f:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:C7:2B:B1:C1:6E:8D:52:B9:FE:08:9C:2F:41:CD:1A:47:BD:E3
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e9:2f:83:68:64:08:64:d2:ed:79:d6:94:2f:e1:51:eb:4f:
d3:51:46:3c:05:57:13:90:ff:26:c2:4a:78:eb:3e:3b:bf:17:
a8:0e:73:10:63:27:61:4a:2c:13:2c:12:68:2f:72:2d:9f:d0:
93:f3:42:bf:70:59:9c:d1:0f:0d:b5:ca:ea:e0:60:47:ef:e2:
01:bb:c0:c0:99:66:2e:9c:0b:31:9c:db:48:28:7a:ec:fa:c6:
11:88:bc:0c:ae:19:5a:0c:62:8d:2b:ea:a6:33:fc:b4:72:f4:
0a:4b:e3:e5:62:26:fa:50:29:b6:20:42:20:cf:d5:5f:a7:46:
a3:72:0d:0c:5a:e8:5f:47:73:be:3c:3b:8a:b5:c2:5d:a8:6a:
cd:51:12:5e:d5:fb:08:26:a9:36:55:bd:e0:5b:25:24:e2:a6:
a0:e1:89:2d:2b:d3:b3:15:88:c8:8d:42:b7:f0:d7:4a:7a:52:
02:0a:43:a9:61:ee:44:2a:38:11:a6:a7:5e:62:a0:b6:d3:8c:
09:f2:c1:de:e6:56:ae:a7:98:16:d2:d1:6f:cc:c0:08:c3:b7:
e6:5e:33:d9:60:48:44:5a:e0:7e:68:b6:b8:ba:f2:9a:06:0d:
c6:58:00:84:b1:c5:fe:de:d2:06:d9:ab:5b:5b:e2:86:68:88:
62:b1:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:14 2025 by rpki-client