Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: WWXGHkwtYy3yDHeZCS/xyI4AF6W1UmTTJs3GhQx7Y6A=
Subject key identifier: A6:18:E6:5D:2F:02:01:EC:43:F6:87:B9:45:6E:AE:10:5C:B7:3E:47
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0199334904635BDD045656E24111A599C3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 0905
Signing time: Wed 10 Sep 2025 11:00:47 +0000
Manifest this update: Wed 10 Sep 2025 11:00:47 +0000
Manifest next update: Thu 11 Sep 2025 11:00:47 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: MvQCxdvQZKrpzvO+XVrxQX9efYwZ8uZeddujeN6OvVA=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:04:63:5b:dd:04:56:56:e2:41:11:a5:99:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Sep 10 11:00:47 2025 GMT
Not After : Sep 11 11:00:47 2025 GMT
Subject: CN=a618e65d2f0201ec43f687b9456eae105cb73e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:eb:96:98:93:72:6a:dd:b3:88:85:eb:5e:
01:c0:c7:d5:a2:8d:42:c8:40:dd:51:1a:7e:a3:4d:
0a:1c:1d:23:f4:a3:1b:c4:08:87:93:f9:34:b5:54:
40:dd:3e:f4:2a:05:71:ac:88:fc:a3:3a:c2:ae:25:
50:63:bc:6d:d1:ca:73:84:43:58:17:16:70:2e:6f:
2c:63:9d:8f:1a:a9:63:b3:63:8a:74:e0:37:e8:2b:
fd:44:3e:44:20:df:fc:a6:57:1f:2d:92:c8:de:fd:
20:ee:68:ba:e5:c3:f6:f7:73:1e:2e:56:c7:62:5f:
fe:34:17:fa:3b:7f:f3:35:77:08:cc:60:c7:1f:8d:
d8:42:52:7b:3d:9e:96:ba:48:25:d9:21:f6:51:90:
9b:b9:63:25:d1:6a:24:81:24:c3:07:4d:aa:fd:7f:
70:55:1d:0d:f3:58:93:12:70:e0:09:9f:9f:ca:f0:
0b:42:cb:86:38:b2:17:ae:e4:86:cb:21:bf:ef:ce:
7d:21:67:e2:67:85:45:5e:65:b6:df:04:3f:66:97:
c8:4b:51:58:77:c7:c4:76:84:d6:30:1e:a3:5b:a1:
94:a4:e6:9c:e3:5c:0d:3d:0f:c7:78:5c:98:10:7a:
62:89:2f:f5:b4:b4:36:c9:ac:5d:ad:53:1c:90:da:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:E6:5D:2F:02:01:EC:43:F6:87:B9:45:6E:AE:10:5C:B7:3E:47
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7b:c0:b4:52:51:66:ec:05:80:03:74:d2:63:42:3e:8b:d8:
ad:eb:fa:9c:ec:3a:60:f4:d2:2e:3e:41:a0:82:13:e4:10:03:
1c:6f:a1:94:68:ee:7e:d7:66:63:89:d7:6b:8b:f2:b3:4d:aa:
90:f6:24:39:d5:e4:8a:85:6f:35:00:6a:40:ac:63:f1:fc:4e:
eb:f9:c8:11:44:0a:03:ee:e8:16:a5:a1:83:b5:06:5b:e0:ac:
79:26:19:e7:a1:7c:1a:4c:10:6e:15:cf:ac:8a:e6:c2:aa:05:
69:c7:3f:37:1f:0a:53:e4:1c:7a:f9:5d:62:0e:2e:43:77:75:
05:af:68:d7:5a:93:6a:ad:ca:2c:22:01:97:66:cc:83:ed:e0:
2a:da:5b:53:fe:50:ea:a4:2d:5c:21:99:10:e3:27:2b:0f:87:
11:5e:e3:27:e6:5e:1b:b4:20:51:8e:66:6c:c2:c5:a6:80:cb:
74:d0:81:b6:f4:58:c0:24:43:23:68:96:fd:b6:ce:8c:98:70:
6f:f5:db:88:b4:22:e5:4f:9e:b8:95:2f:7a:f9:4a:66:7f:aa:
cf:e2:8b:b1:b9:9b:57:63:bd:14:25:b3:fa:fa:99:f2:c3:89:
24:ac:e6:cf:01:94:21:b8:af:3f:6d:6c:0d:61:10:f2:9f:ef:
0a:84:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:24:26 2025 by rpki-client