Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: dDYPWYZ8553NnNYUdteQ5vEgthIW/curwPt6W+h05E4=
Subject key identifier: 8F:E1:C5:A0:F1:1C:9F:95:1E:2F:92:49:3D:0B:BB:BC:5D:EE:FE:33
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 019916F6CC946B978F097D10577183C25E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 0F99
Signing time: Thu 04 Sep 2025 23:01:36 +0000
Manifest this update: Thu 04 Sep 2025 23:01:36 +0000
Manifest next update: Fri 05 Sep 2025 23:01:36 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: O0UKJqlg0mro8GL68REnxNhC5tvu351XVYCOwCwICl0=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:cc:94:6b:97:8f:09:7d:10:57:71:83:c2:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Sep 4 23:01:36 2025 GMT
Not After : Sep 5 23:01:36 2025 GMT
Subject: CN=8fe1c5a0f11c9f951e2f92493d0bbbbc5deefe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:ec:98:94:03:7b:85:df:c8:be:8f:3a:69:
35:0f:ca:42:bf:7f:5a:b9:03:26:03:e4:07:de:5e:
90:cf:17:e9:3c:0d:a9:ed:0c:0d:45:af:8d:d8:25:
c2:bd:48:1c:4d:1d:88:f0:04:e2:e4:d9:0c:c4:6b:
ff:3f:9a:d6:c8:3b:20:b7:be:04:ae:10:34:47:17:
6e:cb:19:2d:ee:9d:e4:1b:28:8b:e5:08:18:6c:bd:
b3:cf:26:f0:de:e5:5d:5a:7b:64:62:93:7e:5e:4a:
17:6d:0f:97:d3:cd:e5:3a:7c:23:6f:db:64:5c:9d:
1f:f0:67:0b:bc:2c:5e:ae:aa:6e:d9:7d:8c:33:b7:
fc:2a:31:11:cd:b1:ac:7e:dd:48:9c:f3:1a:fd:9c:
c2:d3:e7:36:7b:38:bf:a1:2d:f0:b2:22:d7:9b:31:
f7:f3:04:6b:f1:38:4f:54:12:f9:41:18:c5:36:26:
f6:57:a0:ef:00:ef:1e:1a:8e:f7:6d:6a:ce:98:e1:
0b:6a:62:84:c6:c2:39:04:57:e3:d9:bf:30:3f:e8:
da:e6:d6:e0:21:8a:9e:06:f8:95:3e:a0:0a:7d:60:
50:c3:1b:b4:9c:b8:5f:1a:86:f8:e7:79:5d:93:b4:
12:1f:b1:52:66:aa:b6:be:39:67:ad:fa:b4:e7:60:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E1:C5:A0:F1:1C:9F:95:1E:2F:92:49:3D:0B:BB:BC:5D:EE:FE:33
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:6a:63:28:d7:3d:a0:68:57:84:6c:24:4c:f5:49:55:27:
77:80:c1:0c:4f:27:d4:18:02:bb:6d:94:5c:98:07:83:eb:e9:
44:35:68:30:c5:15:bb:ef:71:6d:ce:71:5e:37:f6:5b:1f:75:
4c:ac:95:9a:a6:47:5d:5e:1b:23:b5:6d:f9:2b:63:1c:4c:d8:
c3:93:9b:b9:4d:ec:b8:34:2c:bd:06:4a:5e:44:e7:90:03:65:
a6:96:71:ab:9c:de:d1:3d:ac:0c:22:60:11:61:83:91:2e:37:
8a:96:e0:fd:ac:33:3f:e4:d3:41:bf:fa:bf:f5:59:8e:8a:3e:
cf:4f:5a:cc:f6:66:fc:b7:f7:8f:0f:39:06:7c:c2:22:75:a4:
6d:86:65:af:af:a1:4f:ac:b3:fb:8f:df:f7:e3:94:17:39:bf:
b1:8d:d3:c1:26:a4:3f:a9:09:80:12:9e:0f:8d:70:68:17:3b:
0a:03:97:c5:1f:0f:03:f5:51:79:c7:d3:a9:c9:0d:8e:1f:ff:
32:66:7c:b7:06:07:12:56:3a:40:97:a3:ab:c0:08:61:6b:7a:
95:29:2d:30:92:9d:52:68:2a:85:9d:c1:cb:e6:f0:4d:42:69:
97:35:7b:02:05:4f:1a:cf:c6:9e:b7:fe:48:9b:06:ef:d6:6f:
74:4a:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:24:50 2025 by rpki-client