Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: hbVmH2ds76sqhrWHBZow1SQ0c1GkUOogyZz+TXThfGQ=
Subject key identifier: 83:BD:42:D4:A6:30:20:13:E8:54:97:FF:76:E9:1B:F7:AF:9B:31:0A
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019921B2879BEF39DCFF04B51339125AA4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 01:02:52 +0000
Manifest this update: Sun 07 Sep 2025 01:02:52 +0000
Manifest next update: Mon 08 Sep 2025 01:02:52 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: bSdPrjOkSZb87h3jqxVr1nIJfdN6NTR79Saj9kOuGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:87:9b:ef:39:dc:ff:04:b5:13:39:12:5a:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Sep 7 01:02:52 2025 GMT
Not After : Sep 8 01:02:52 2025 GMT
Subject: CN=83bd42d4a6302013e85497ff76e91bf7af9b310a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:39:5c:41:9b:30:61:1b:8d:fb:f9:20:cc:
a1:ba:fa:cc:2d:35:96:a7:aa:b0:fe:18:7f:e7:04:
89:73:d4:69:26:4d:c8:ea:a3:3a:ff:ad:8a:7c:e4:
4a:44:12:66:5b:fa:b7:96:d6:d1:81:9b:1d:7e:79:
06:7e:30:d6:40:4e:10:4a:78:47:94:ef:ca:e0:2f:
92:c0:b7:b0:09:17:a8:0e:a6:5b:56:93:6c:7f:e9:
d8:80:46:fb:d2:c9:b5:86:a2:d8:79:ee:10:6c:61:
73:31:6f:88:f3:76:1f:31:44:f6:ae:7d:26:ea:e4:
be:fa:89:9f:cf:69:16:9a:cf:12:ee:c1:1d:f9:49:
5d:b4:74:de:f2:85:f7:f0:f7:8a:87:8e:76:e5:db:
28:b5:66:f8:47:c5:85:b6:76:8e:8e:da:fc:ff:a5:
7e:84:81:e0:be:99:a0:b5:ba:e7:ca:37:bd:38:c9:
3e:ee:72:7b:f5:d8:82:98:61:a1:27:e1:ae:29:e3:
2d:ae:2a:6b:2b:62:94:a0:0d:5d:a6:1c:a6:b5:09:
d0:43:55:36:a5:70:8d:bd:88:89:48:d8:01:b4:ea:
e3:bb:ab:77:c2:23:26:0e:6f:6a:06:f9:c0:6c:2d:
bd:dd:b1:58:3e:35:f9:24:f8:a8:9b:27:44:02:6d:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:42:D4:A6:30:20:13:E8:54:97:FF:76:E9:1B:F7:AF:9B:31:0A
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a8:25:ed:d0:d4:53:d1:60:50:af:2d:d4:9e:e1:98:82:8b:
9c:e3:f5:fd:0a:3c:cf:1d:60:2c:c3:a3:a8:3f:6d:c1:88:9e:
b9:05:d1:21:b0:c1:b9:c6:72:7e:f8:dd:43:c2:63:68:9a:26:
44:45:27:f5:6f:25:ec:33:77:82:9b:d9:14:2d:f3:a0:a8:c9:
95:b1:df:40:38:67:ee:86:3d:65:62:47:ce:fc:87:64:3a:9a:
7d:26:05:3f:59:d2:75:02:2d:9b:5a:44:c3:ac:bb:f5:8f:a1:
65:06:a6:76:04:17:93:4b:97:59:91:53:1f:a0:1a:8e:7e:94:
2d:5d:0f:a7:fc:52:33:3c:51:26:9f:5c:c5:ad:7e:e4:56:f8:
ea:38:79:59:d2:a9:ae:11:d3:28:1e:7d:59:11:0a:2a:81:c1:
f0:53:f4:e3:ae:33:89:d9:83:7a:86:75:ea:89:0d:d9:f9:7a:
9d:3c:87:75:46:64:79:45:7c:f3:e2:5e:03:90:71:f6:56:4b:
32:17:a3:99:41:01:6d:f4:c0:44:af:16:64:07:12:28:dd:9b:
da:26:9b:d5:d7:fd:ea:95:30:92:5f:11:d5:29:ff:ff:f7:b7:
51:4b:ec:c1:f6:6a:82:f9:f2:8b:6e:00:71:6b:62:8d:a7:b1:
cd:55:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client