Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: t09fLh/Btf4B34ZIaPEoQsXl3dN9U3e6CpUytVALdE4=
Subject key identifier: 5A:AC:F2:7B:F7:2B:C7:81:19:10:E6:6A:A2:78:6D:1E:8B:21:3B:BF
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0199228D1BE940C70479840D31ED6BD571E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0E80
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: nCKxBegs9tTb5fnt2aQF6Zy5DdL1TKa/6fn30GalFSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1b:e9:40:c7:04:79:84:0d:31:ed:6b:d5:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=5aacf27bf72bc7811910e66aa2786d1e8b213bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:90:85:40:fb:76:29:0b:83:1b:aa:11:13:
82:9b:62:7e:c4:aa:f7:55:27:7e:33:12:7a:ba:e0:
6c:a4:8e:50:da:4a:9b:cd:ce:c9:db:73:c0:b8:70:
86:f8:a5:77:bb:02:49:c9:7d:9c:fb:5f:81:0d:31:
47:ce:c6:02:42:61:d4:01:a0:48:24:d9:7c:c9:15:
45:44:2d:57:60:ef:4f:1d:59:51:c0:69:c7:17:98:
fc:43:50:fc:17:87:7e:51:d1:60:bc:51:a2:b1:2a:
fa:1b:aa:f4:9a:1b:f1:5e:a0:22:69:1d:4c:d6:32:
06:39:d8:ad:4c:55:1b:eb:ab:af:1e:1a:dd:c6:9b:
07:47:d9:a8:1a:b5:c6:84:ec:ac:39:43:e4:4a:ab:
e4:ca:72:73:9c:3d:83:3c:8a:69:66:f4:0d:06:ff:
9e:c8:ab:55:f7:15:7a:2b:21:87:48:1d:b4:c6:27:
82:71:d4:a8:86:c2:05:8d:0d:8b:5e:c9:e5:88:e9:
04:cd:80:2d:2d:6c:cd:9f:9b:f9:d8:da:4b:72:6c:
0d:e6:87:1e:1e:d6:fb:a2:ff:80:75:dc:af:0d:b5:
7f:95:bb:92:f0:74:f3:f6:f9:28:1c:74:43:5a:27:
f2:f2:d4:48:78:76:70:74:2b:fc:ba:09:72:33:08:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:F2:7B:F7:2B:C7:81:19:10:E6:6A:A2:78:6D:1E:8B:21:3B:BF
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:03:94:56:5d:94:cf:37:4a:ef:eb:0f:ab:9d:88:81:ea:ce:
46:85:5c:a2:3e:ea:2a:82:24:b8:bf:26:fa:d5:45:01:67:e7:
0b:3e:e5:0c:5a:90:8f:5c:44:24:d2:aa:3c:9e:17:d1:1d:8a:
c9:f8:4e:5d:cd:43:c6:a9:af:c8:d2:ac:f9:ea:20:1b:69:00:
fa:0b:d9:b9:bb:52:70:e9:92:d6:a8:cd:91:e3:cc:4a:b2:33:
d9:31:7e:b3:87:12:70:96:bf:8c:20:fa:c0:be:52:0c:75:dd:
2d:c8:85:d5:26:65:91:65:63:51:7a:03:8c:f5:77:f5:89:81:
8b:39:18:a4:0d:8c:3c:c1:82:4f:1d:cd:34:72:e2:58:0b:f9:
1e:2d:91:6d:d0:55:6e:76:ea:63:54:f7:58:f6:f3:d2:19:60:
0f:b6:05:10:fa:ac:ae:18:a5:96:41:a1:cd:d9:9c:37:a8:d6:
a7:19:06:1c:18:80:d0:a7:97:c0:21:81:24:5b:ff:94:c0:8a:
6f:32:e8:d8:cf:a4:7d:16:8d:66:a7:d8:da:7c:54:6f:ae:5c:
af:54:e4:53:45:65:f3:08:ec:7f:a9:26:74:4b:73:94:de:9d:
05:6f:f2:9b:01:62:6f:01:79:9a:5f:11:77:b1:a5:59:bd:6c:
33:0c:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:12 2025 by rpki-client