Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: g3G/c5J/NnUeNpB5n8rEYdy6TWmYjbDyxn7QcfY2kQ4=
Subject key identifier: 47:53:93:FE:4A:19:8B:67:54:E2:10:B2:FE:98:56:14:29:33:3B:A2
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 0199221E4AE07C60CC32A4C23851D61431D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:34 +0000
Manifest this update: Sun 07 Sep 2025 03:00:34 +0000
Manifest next update: Mon 08 Sep 2025 03:00:34 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: HhcpUACEliPFgqvb4Ki0Ea1kQDwxGHgBWNaE3W5LVrE=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4a:e0:7c:60:cc:32:a4:c2:38:51:d6:14:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Sep 7 03:00:34 2025 GMT
Not After : Sep 8 03:00:34 2025 GMT
Subject: CN=475393fe4a198b6754e210b2fe98561429333ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:92:53:b5:13:2e:0a:eb:16:8a:30:6e:e1:
20:9e:5c:d8:34:3c:14:f3:54:87:45:07:74:bd:25:
c2:da:bf:09:26:db:a9:8c:1a:b9:22:a3:b5:d1:08:
d3:b8:86:a4:d6:2c:31:a0:d6:23:43:ac:1c:97:b5:
15:e8:57:45:c0:2f:ce:2d:7c:31:f5:d1:9e:e2:45:
e9:33:e3:26:df:18:b7:ea:08:d9:ab:3c:8b:78:fc:
07:78:d5:57:f9:ce:93:e1:3b:6b:9d:ed:c6:ed:78:
75:cb:41:59:c0:2f:15:47:80:78:bd:8c:a6:d8:cc:
ff:e1:09:8c:16:c8:9a:0c:a4:02:83:1a:4d:17:16:
a3:0d:96:f2:47:61:9c:af:eb:84:30:63:b5:79:44:
95:77:1c:fb:29:86:e1:bf:2d:b5:74:ac:b2:d0:7d:
77:f1:ac:9b:cc:10:3c:52:9f:86:cc:c5:31:9d:70:
68:be:2f:f4:c2:26:b0:dd:c8:91:90:f3:4f:1e:4a:
52:83:1f:ff:2f:9a:8b:91:c9:51:45:15:c1:eb:87:
ac:f9:89:e1:39:8d:18:2d:ce:7a:ae:cb:d5:0a:99:
02:52:dd:11:f8:b7:24:94:16:17:b1:96:a6:35:e6:
5e:60:d0:b3:90:84:67:fc:e4:58:13:0b:31:60:50:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:93:FE:4A:19:8B:67:54:E2:10:B2:FE:98:56:14:29:33:3B:A2
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:81:b7:09:2d:9b:3c:5d:23:14:16:92:27:e8:69:cd:8e:
6c:eb:04:ab:30:78:7f:13:9b:21:52:1d:0e:b7:e3:d5:b6:69:
53:42:a0:66:46:33:3b:48:28:0a:49:88:28:a8:52:90:f8:69:
14:79:79:0e:9f:5c:18:00:78:cd:64:b6:02:31:c4:8e:89:94:
e1:cd:3c:f7:43:b1:50:b8:cb:42:2b:f0:cb:b0:01:3a:94:7a:
f4:59:17:94:86:0f:21:81:cc:f1:de:c5:4c:7e:82:0c:a5:64:
29:06:63:21:04:1f:b4:98:c4:d5:4b:82:cf:df:fc:6f:a5:91:
aa:a9:af:e8:82:74:2b:49:9f:a9:3d:bd:90:a3:7e:8c:dc:89:
f9:3b:74:a5:98:f5:a7:78:0d:b5:6f:c2:91:00:f0:dd:29:49:
cc:26:52:36:51:3e:be:dd:ed:af:af:15:59:59:8b:e4:de:2e:
1f:28:12:89:3e:83:cf:a1:22:89:a8:aa:e3:94:0d:fe:0c:8a:
c6:c8:84:44:19:bd:09:67:ed:e4:26:84:fd:ff:dd:27:ec:c7:
2d:5f:95:ad:40:37:76:d1:ca:4b:14:a0:35:8d:6f:23:e5:4e:
f1:ab:75:3f:7f:f4:15:94:59:be:45:eb:09:b3:78:13:0e:dd:
e0:3c:6a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client