Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: oe7QmPUN0Zwb52TBDODV4y8zuftPreh5sDFOd08yJ5M=
Subject key identifier: 9E:B1:7D:23:89:E6:61:A7:A2:BA:B7:28:3B:A4:32:29:12:7E:03:AF
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 01991BE5B3280CB991486FEB2191CB0F6669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 167F
Signing time: Fri 05 Sep 2025 22:01:02 +0000
Manifest this update: Fri 05 Sep 2025 22:01:02 +0000
Manifest next update: Sat 06 Sep 2025 22:01:02 +0000
Files and hashes: 1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
4: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (hash: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=)
5: k1wogzI71Qav_nbvke05rmKJg8Y.roa (hash: 1zvN4RDzCr99s7IBr9z4fRCGgHcMNBnaaWXwLcWIgno=)
6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: 6vZc6Cip1Z/pM1VDKXmaUAZlxnOAfLK3ml11aYKws4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:b3:28:0c:b9:91:48:6f:eb:21:91:cb:0f:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Sep 5 22:01:02 2025 GMT
Not After : Sep 6 22:01:02 2025 GMT
Subject: CN=9eb17d2389e661a7a2bab7283ba43229127e03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:9a:70:64:c1:b7:81:4e:c1:ca:89:70:fa:
c4:43:3e:4d:e5:20:ae:50:48:70:52:6a:81:7a:ae:
ea:d9:14:da:7e:52:75:91:40:9f:de:02:ae:93:bd:
99:0e:73:9a:6e:ea:ac:ef:92:bb:b6:df:ef:87:0c:
f2:df:75:84:52:7a:a0:47:ac:0d:fa:01:85:a3:0b:
7f:1f:7d:71:4e:71:46:15:61:43:ce:af:86:d9:10:
f1:ed:9c:85:61:75:6d:c3:52:f7:df:93:e0:88:b9:
c5:fe:a4:05:9f:c5:b2:1f:c6:93:d6:a5:c8:b4:15:
af:05:6e:d8:7c:ee:f3:f7:86:03:95:6d:4c:24:b4:
f6:f8:59:f4:ab:1f:61:21:16:ec:0b:bb:a2:aa:ec:
dd:b1:a6:25:a3:3d:e7:67:ba:2c:e4:b0:15:93:fa:
a9:31:e6:50:99:be:6a:da:9f:3e:90:23:01:8f:79:
b3:e7:27:03:81:db:f7:90:f4:a6:b8:b6:ba:93:0c:
67:cc:7d:49:14:03:f3:a8:c9:96:42:fe:75:56:10:
a3:4d:49:a2:f1:d3:b3:e5:2d:a6:d5:82:c8:8b:81:
6e:81:3e:74:35:62:6a:5d:80:55:98:70:46:c8:97:
60:9e:26:dc:15:ea:b8:ba:02:2b:5a:f8:c0:7f:bd:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:7D:23:89:E6:61:A7:A2:BA:B7:28:3B:A4:32:29:12:7E:03:AF
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:0a:64:d6:32:50:ca:7b:a8:a4:8c:44:0a:49:bb:8d:fe:
42:88:a7:7e:39:09:de:3c:51:65:17:24:0c:3a:13:18:0d:04:
63:44:8a:e4:8f:d0:86:bd:1b:8e:10:1e:ad:52:d9:7f:7c:3b:
cb:89:34:28:a7:af:72:d6:dd:cc:ed:f5:b1:2b:6d:86:78:a1:
06:af:11:cd:b1:64:ab:80:4c:2a:1d:c5:1b:fd:52:58:33:a4:
6a:62:2a:1a:98:d9:69:43:86:dc:36:61:c9:c1:95:00:b8:1f:
29:a5:02:14:33:cd:01:9e:5f:d7:81:20:65:eb:cf:1f:d3:67:
b6:e0:ec:a0:10:ab:3c:9f:d2:c7:9d:83:41:37:16:c4:71:00:
92:e1:3d:6d:21:e2:cd:b7:3a:8e:21:b3:2b:cb:0c:35:1a:cd:
9f:e0:c8:21:95:3c:f1:7d:89:44:a6:06:32:9d:fe:ef:ea:07:
16:98:cd:63:13:b9:47:4f:56:0b:9e:86:b4:f4:39:9a:ce:91:
b7:41:cb:9e:3c:3b:47:a8:1d:5d:e6:08:9b:8f:a2:cf:b5:36:
d0:af:0d:41:0a:08:f7:5d:88:8a:d4:47:89:33:ff:c8:5d:cf:
f0:99:06:c5:0b:45:89:16:04:8d:77:5a:b2:03:79:3c:21:d6:
dc:65:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:54:12 2025 by rpki-client