Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: 5pV1KPmomq0sZsN3CjPAqikltn+wnaprvL/FRWW83vg=
Subject key identifier: 8B:74:F8:2F:F6:ED:40:7F:63:F1:72:49:2F:8C:AD:F0:1C:4F:80:3E
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 01996058E935A6E6CEC5B965605C22B87AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 08C3
Signing time: Fri 19 Sep 2025 05:01:03 +0000
Manifest this update: Fri 19 Sep 2025 05:01:03 +0000
Manifest next update: Sat 20 Sep 2025 05:01:03 +0000
Files and hashes: 1: 2tVvT-OzgGdNXgQsNlAxpRssgyE.roa (hash: EhNAeP4JfxTsW+0bH7nE7m5v2RlCWybXdkQhCZXgLiY=)
2: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
3: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
4: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: Ys7iXktX0I3FXkEjDnZE7LSYsuejqVq0IRbOEYvjGaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:58:e9:35:a6:e6:ce:c5:b9:65:60:5c:22:b8:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Sep 19 05:01:03 2025 GMT
Not After : Sep 20 05:01:03 2025 GMT
Subject: CN=8b74f82ff6ed407f63f172492f8cadf01c4f803e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:db:0f:c5:a9:7d:a9:71:3b:8c:37:a2:80:
68:cb:06:85:e6:62:05:72:12:c2:69:d9:3f:81:01:
91:c6:5b:4a:ec:1b:5c:a4:d4:37:49:7e:65:a5:fe:
e6:9d:87:53:76:62:98:4f:a1:40:07:87:d5:b3:0c:
ad:76:46:45:96:bd:2f:3d:2d:69:df:a7:5e:4c:ab:
97:d8:7d:c8:81:50:da:e1:9e:14:a1:6d:12:4e:a2:
1d:ca:e0:d4:de:53:36:96:08:3f:33:b9:c4:52:94:
5d:aa:d9:7f:99:1e:9a:ac:6c:cc:67:32:6d:f0:11:
1b:2b:2c:76:74:e9:01:f8:30:c8:22:4e:88:3f:7a:
4f:65:dd:8e:6d:16:18:4f:fc:85:03:64:67:29:fa:
e2:a4:d9:45:28:c2:c2:15:df:c6:08:c0:18:06:07:
e4:39:b7:1f:32:b4:b1:14:b3:12:7b:84:df:c1:3b:
12:83:f8:6e:e2:eb:66:bf:de:52:48:89:de:d7:53:
76:b7:9f:5c:31:f2:f3:8b:b6:5d:30:4a:68:15:e2:
43:71:d2:b1:be:47:4f:b8:d0:67:a8:76:22:46:aa:
4f:26:39:c9:e8:67:b2:7a:02:53:81:89:d2:e8:75:
bd:29:9a:77:9e:c0:21:b5:3f:ec:eb:15:a4:72:19:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:F8:2F:F6:ED:40:7F:63:F1:72:49:2F:8C:AD:F0:1C:4F:80:3E
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7f:cd:21:4b:f3:dd:d5:d0:48:02:ad:8e:b9:3b:c2:5a:aa:
89:c3:d6:39:96:a1:51:96:b1:d2:69:0e:9c:99:84:6f:d5:98:
30:9c:7d:64:51:0a:f8:61:f2:b2:59:db:2c:ab:ea:6a:07:1a:
a3:d4:0e:db:8e:ee:57:7b:57:c8:ee:90:3f:c9:b1:48:97:f3:
b4:48:cc:0b:f6:77:c0:d6:69:a7:01:c0:ce:d2:e9:96:dc:2f:
7b:5d:15:f6:61:74:6a:db:cc:88:2c:81:c8:f2:b7:16:b6:0c:
4d:a8:83:6a:f6:72:dd:71:ab:f4:05:6a:41:b9:d5:41:a0:70:
86:59:e8:b2:55:54:39:8d:f4:de:e2:ad:49:71:e0:a9:e7:44:
01:e8:c3:9e:77:07:07:65:0c:07:1e:e4:d0:da:23:0d:70:22:
80:77:06:f5:72:e0:f7:44:8b:73:32:49:fd:4d:cf:86:60:67:
09:bc:57:55:54:0a:05:0c:8f:9d:ea:46:2d:cc:05:f6:5d:52:
5a:d9:ae:3d:67:f0:72:5b:79:fe:be:da:e5:c7:51:60:ba:b4:
4a:cd:7e:3d:84:4f:66:54:15:00:b3:a5:e6:b3:fa:af:b7:38:
63:44:87:f2:31:c1:8f:13:a6:60:29:8b:53:31:01:4d:51:31:
ff:1f:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:52:53 2025 by rpki-client