Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: 8R4D63wVKWkMCTvGCwUzsMd8OLC/CXSmOa0r3Z7cUFE=
Subject key identifier: 05:DC:BF:E2:FB:2E:46:09:8D:67:21:57:5B:7A:DC:B3:1E:69:B1:5F
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 01993349136AC2F2DCF6180D6D05692B8C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 11:00:51 +0000
Manifest this update: Wed 10 Sep 2025 11:00:51 +0000
Manifest next update: Thu 11 Sep 2025 11:00:51 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: UzCZzyPMvDT+N25geCP+wSZIC/fuJATwOTaj41sXLU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:13:6a:c2:f2:dc:f6:18:0d:6d:05:69:2b:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Sep 10 11:00:51 2025 GMT
Not After : Sep 11 11:00:51 2025 GMT
Subject: CN=05dcbfe2fb2e46098d6721575b7adcb31e69b15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:bc:50:62:ae:b6:27:4b:b2:09:ca:b8:ce:
17:21:54:44:06:ab:04:c8:56:df:bc:1f:41:e4:03:
a5:37:92:18:80:eb:80:af:12:4e:d0:9a:86:91:71:
a0:78:10:61:79:06:61:61:05:c2:50:69:4a:fd:f6:
46:b5:c9:d9:24:7f:57:24:b8:a6:2d:c9:22:29:af:
25:d4:66:b3:bc:95:ee:13:84:f7:d0:ea:01:59:a3:
ee:de:20:58:a1:03:a8:9d:8c:4c:a1:5f:8a:cd:07:
14:8a:e3:a9:e5:3d:02:c3:cf:ac:c5:2d:48:77:d5:
cb:30:71:e7:0c:6a:59:7d:a2:79:12:27:55:ee:0d:
ae:2b:a6:c0:42:6c:59:45:26:59:36:08:1e:65:aa:
23:82:22:66:df:fd:39:ff:9b:26:ca:92:c5:2c:d3:
0c:2e:71:b0:f9:95:5a:15:e3:db:f7:a5:ff:3b:61:
89:60:2d:96:38:8e:05:73:eb:74:1f:31:fb:49:c0:
8a:bc:68:9a:16:15:2c:5a:a9:b4:ab:d3:09:0d:17:
87:83:d7:36:d5:82:19:d1:89:ad:bb:13:cd:f9:6c:
d1:e7:6b:a4:82:2f:69:b2:fc:89:1c:4a:b8:06:0e:
5c:6d:4d:1c:b8:c6:71:3a:46:03:9c:38:4d:8b:48:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:BF:E2:FB:2E:46:09:8D:67:21:57:5B:7A:DC:B3:1E:69:B1:5F
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ac:ef:52:3f:71:e5:61:be:03:b7:be:df:1b:3a:26:1c:cf:
6d:2d:40:73:fc:e4:2a:7e:9c:48:f5:d1:71:0b:63:d9:94:ae:
df:4f:d4:52:f5:4a:0a:22:81:e4:51:63:d4:ac:a9:27:e6:e0:
d4:86:42:36:0a:3a:d6:83:a4:b1:20:5b:b7:d6:78:15:a3:00:
27:29:5e:82:85:3d:1e:a7:e0:93:1d:2c:0c:13:0c:db:ee:e1:
7a:fc:89:25:ab:6d:2e:2b:60:4f:fb:49:17:d6:b9:f8:ec:66:
34:b1:1d:c5:e1:9b:3f:6a:e5:48:a8:69:13:49:8c:f3:4e:97:
67:1d:79:23:66:82:16:36:c4:09:99:d5:30:b9:4f:14:4b:6e:
d7:26:77:46:9d:54:bb:ed:f1:5c:de:42:95:fe:10:33:e8:93:
f5:2b:63:05:fd:cd:72:0f:9f:21:e6:8c:cd:9c:99:a5:87:3a:
d2:cf:d1:d9:76:98:cb:3a:3e:8d:63:54:28:e8:6e:d2:4e:92:
a8:ed:18:1e:f1:f4:cb:82:93:59:40:ed:98:70:56:64:d6:8c:
bc:30:12:02:43:b4:27:39:34:92:5f:14:d3:f7:fe:b2:a7:af:
5d:1a:cd:4a:dd:8b:30:97:35:15:92:59:07:35:52:21:3d:d6:
fe:a3:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:10 2025 by rpki-client