Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: oC1+3Fz7QNH8wtf6fB2j1Z11P8EuNdB5zOnHAEcDzcI=
Subject key identifier: 69:05:ED:B8:E7:71:10:D4:F2:F2:A3:F5:CE:E0:BF:70:01:BC:CB:AB
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 019932369F6B98B5DD918B45880F5CD3425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 0976
Signing time: Wed 10 Sep 2025 06:01:04 +0000
Manifest this update: Wed 10 Sep 2025 06:01:04 +0000
Manifest next update: Thu 11 Sep 2025 06:01:04 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: RRiS1Q+fcS8GMS362zxGaAyDJ7WhoibjSWyve/lmHVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:9f:6b:98:b5:dd:91:8b:45:88:0f:5c:d3:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Sep 10 06:01:04 2025 GMT
Not After : Sep 11 06:01:04 2025 GMT
Subject: CN=6905edb8e77110d4f2f2a3f5cee0bf7001bccbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:43:dd:c2:70:40:3c:75:ed:f4:d6:4a:df:
75:f5:64:9c:af:92:a0:16:3c:d6:03:26:82:0b:35:
2e:e1:b8:78:03:3c:d7:eb:09:13:25:55:84:3c:a1:
76:a9:a0:45:0c:da:14:99:a8:d0:6f:00:68:de:52:
82:75:dc:10:fa:1e:90:22:59:5f:18:72:4c:5b:fc:
04:63:79:65:da:dc:36:05:cf:6a:55:35:fb:68:6c:
27:4c:0b:16:c4:7a:b9:dc:e2:9f:dd:13:48:73:c7:
65:33:85:dd:10:92:ee:49:c5:bf:fd:16:b3:d5:d0:
18:b2:95:28:8f:49:81:bd:b6:f3:df:cb:46:1a:3c:
01:78:86:ad:be:ff:74:ac:f9:c1:2f:2b:ec:0a:8c:
b1:67:20:26:bf:8e:12:6b:85:cc:21:82:05:cb:41:
03:fd:90:72:e7:53:ee:65:1c:f2:6e:d3:49:9c:66:
95:e8:80:90:b9:ce:01:e1:4e:60:a8:11:0a:d9:66:
f9:8a:71:d8:25:50:4f:e9:83:4d:a3:a8:41:3d:66:
86:9d:12:c2:5c:b7:65:d6:cc:3c:c4:83:84:8e:90:
5a:76:4c:7b:0d:5c:60:29:bd:e6:23:a4:84:81:0f:
e2:ae:73:04:81:21:90:78:ad:de:7b:dd:6f:37:ba:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:ED:B8:E7:71:10:D4:F2:F2:A3:F5:CE:E0:BF:70:01:BC:CB:AB
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:21:a8:24:b6:a7:98:bd:3c:31:d3:90:4a:90:b2:b2:2a:
63:4d:02:77:9a:80:55:01:e3:b4:a3:d7:24:2c:83:60:05:cb:
4d:fc:5f:29:46:ec:8d:18:c7:c6:15:31:88:a1:ea:cb:21:ed:
1f:4c:0f:1f:81:95:9b:96:a7:ed:b5:69:80:ff:02:0c:eb:43:
83:ad:6e:b9:b7:d8:be:64:83:ec:c0:45:29:93:b5:5e:49:77:
a8:fa:7d:a2:cf:83:54:11:7f:ca:0f:b1:6d:70:0c:57:28:e9:
10:d6:89:d9:84:ce:5c:70:5a:98:d5:65:71:1f:43:93:0a:6b:
e2:cc:64:31:6a:92:1d:16:8c:3f:ed:08:76:61:66:65:29:c6:
03:75:01:fe:37:91:1e:c5:6c:ee:eb:c0:a3:82:33:0b:78:28:
3c:bd:2e:53:46:b0:c0:88:d1:e4:4a:d3:cc:f7:de:c1:3f:4d:
d7:bd:c7:62:72:c1:57:ba:9b:20:78:8e:19:af:6b:8e:f9:e2:
fe:85:a2:1f:68:70:76:ed:ef:ed:9c:6a:ed:5d:a2:ab:66:ac:
0a:0b:85:0d:65:45:96:f9:70:1d:71:82:f6:db:ac:ae:92:a9:
26:b4:0e:be:6e:c0:1f:65:2b:bb:5b:59:57:dd:62:7a:0f:43:
df:36:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:45:57 2025 by rpki-client