Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json)
Hash identifier: 2WnYrErBxHrrbFyBqQ0RAloLQh6RIMaO8ShGy2VUQNw=
Subject key identifier: 59:FC:B1:EE:60:F7:27:C5:0B:0C:32:FA:A5:8D:37:24:39:FD:94:F7
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019A71EE6029BBBC9D511C5258EB34F61174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: /+dLHu5gVFUNMKtJ5tJh6sN4Kl0o6B8jmItzC66YPyg=)
2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:60:29:bb:bc:9d:51:1c:52:58:eb:34:f6:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=59fcb1ee60f727c50b0c32faa58d372439fd94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:70:59:27:6e:39:84:d2:35:c7:95:7a:d4:
21:c8:44:75:1a:03:a7:5c:37:95:a7:16:f5:ec:f8:
cb:88:07:f8:9b:5a:29:f5:f6:a7:7e:05:88:12:3f:
06:21:60:26:ea:f8:29:6f:47:0d:70:3a:14:b5:47:
c5:be:3a:2c:f8:0b:a4:63:81:7f:30:bd:8e:8a:b7:
c7:d5:66:3b:9b:d7:22:34:79:41:ba:54:d0:31:5c:
86:e8:56:6c:78:db:f5:a1:0e:4b:31:28:52:53:f1:
1a:61:80:c3:a4:d2:78:da:b7:ea:4b:d8:d6:19:46:
50:82:d2:56:a0:50:93:3b:6e:ce:c5:1e:d6:78:68:
08:a9:2c:3d:bd:20:5a:29:ed:2a:42:70:58:76:58:
6b:8e:d4:c1:90:8e:ee:a3:ac:04:bf:48:ac:71:c4:
48:b2:26:fc:b8:1f:04:49:e2:b6:fd:0d:e3:56:3f:
0a:39:5f:5b:dc:08:bc:4a:98:53:5c:fb:ab:4a:05:
d8:6c:89:42:94:35:f9:ce:3c:b6:93:e0:61:9c:3f:
25:f7:a3:cc:65:d5:87:89:f5:e2:fb:30:eb:85:a4:
c1:a9:46:9e:39:a1:3d:67:14:3d:a7:d1:9e:43:c6:
24:f2:e3:bc:87:83:d1:08:98:da:b8:a5:69:cf:50:
5f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:B1:EE:60:F7:27:C5:0B:0C:32:FA:A5:8D:37:24:39:FD:94:F7
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:fd:2f:9f:80:a3:86:83:54:12:55:85:0f:86:00:97:d3:
ca:e1:b2:01:bf:1d:c3:55:04:c2:c6:57:df:50:ce:85:38:ce:
bd:6f:68:e8:ae:9f:93:06:76:43:35:ec:e3:18:03:3d:26:51:
32:6d:5a:b2:17:68:ff:41:1b:1c:96:47:f1:d7:26:7a:06:f4:
50:3d:12:3f:fa:c3:2a:82:72:71:a3:f5:8f:3a:c9:5d:c3:d3:
f7:6d:71:be:22:f3:33:69:70:b4:db:88:7e:36:63:f3:e1:38:
65:ff:03:19:ea:07:e2:7e:7e:52:b3:dc:6d:a4:cf:18:a3:f5:
b6:b4:4b:e4:c9:0f:80:66:28:df:6b:af:6b:1d:1b:d2:c1:ea:
b8:4f:4b:67:dd:40:eb:61:3a:9c:15:64:d2:11:b3:90:fe:45:
41:e3:70:22:cb:62:b7:74:0c:d8:31:0a:fb:0c:9c:ea:67:67:
19:0a:81:3a:62:53:91:74:32:2d:6e:ba:05:41:2a:f3:f8:15:
a4:32:05:86:4b:7c:41:0a:92:bd:6d:d7:22:e8:d4:a9:8d:4a:
3e:21:b4:b0:ee:29:56:da:54:38:72:f8:c7:24:89:0b:06:1d:
23:4a:a7:40:a3:cc:79:fe:41:09:ad:b5:df:7f:0b:67:62:6d:
fa:5b:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:47 2025 by rpki-client