Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: +nX4RbE48cCsGcoxVneYk3sdl/TusJO7tB2q5XMUwKQ=
Subject key identifier: 94:BE:80:C9:A6:94:E4:10:F0:A3:5B:0F:24:17:50:DA:FD:D5:86:9E
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0199338059A12C22E1AC15CDC847BE0C1B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 0625
Signing time: Wed 10 Sep 2025 12:01:13 +0000
Manifest this update: Wed 10 Sep 2025 12:01:13 +0000
Manifest next update: Thu 11 Sep 2025 12:01:13 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: Vi3hE4Il3NwSR5sQPBuCGQ2RCEnTGlMQb5jAY21UoZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:59:a1:2c:22:e1:ac:15:cd:c8:47:be:0c:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Sep 10 12:01:13 2025 GMT
Not After : Sep 11 12:01:13 2025 GMT
Subject: CN=94be80c9a694e410f0a35b0f241750dafdd5869e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:22:a4:c6:27:3f:24:7a:d1:b3:c5:fa:e3:
96:5b:7c:dc:ca:3c:f5:65:8f:70:e8:25:ae:81:8f:
0c:44:4e:eb:ba:9d:ef:25:ef:a1:76:84:a4:06:da:
53:8d:18:0e:50:95:5b:b6:57:13:83:6c:0e:a8:d1:
2d:fe:45:a9:28:68:9d:30:1b:70:8b:7d:b9:e3:0d:
75:b5:b5:3d:64:1d:d5:6f:36:99:20:64:68:3a:0b:
86:09:4b:bb:29:64:9d:d3:c0:a1:5f:b3:25:dc:77:
e9:02:10:55:23:6d:0a:f1:e9:43:94:6d:52:81:8f:
75:58:c1:f8:c8:b5:17:c5:b8:72:b8:d3:01:58:0a:
a9:53:8e:85:2a:42:b3:62:b5:11:90:9d:cb:8b:fc:
f5:2d:b3:de:0b:c8:ae:84:12:14:01:f5:ac:b5:c9:
7e:40:98:d3:15:d1:d9:f1:3d:bf:2f:ee:e0:c7:ba:
bd:b8:a4:9a:37:ea:72:6f:6a:35:77:de:b0:a9:f5:
cf:c2:3b:63:bd:24:79:bd:86:7b:d7:d0:b3:62:52:
1e:ec:12:d4:0c:8d:2a:4e:90:23:c9:08:19:af:d4:
96:73:d2:49:92:04:94:49:79:26:dc:45:82:ce:af:
2f:a5:a2:51:26:04:61:fc:9e:17:a6:7e:d8:e3:31:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:80:C9:A6:94:E4:10:F0:A3:5B:0F:24:17:50:DA:FD:D5:86:9E
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:43:6d:99:f9:e1:89:7f:6a:8c:de:cd:51:73:49:d6:b4:
22:9b:b5:9c:37:17:d3:ac:1d:80:c1:e8:ac:ee:24:ba:fa:8e:
42:1d:d6:1d:da:d8:8b:d3:fe:a5:68:d4:25:8b:ab:2d:d5:4e:
c7:68:1a:f6:ee:62:90:7e:41:43:52:2e:38:e9:57:a0:c0:f7:
45:d6:be:eb:01:08:96:f9:8a:de:6a:80:2c:44:36:52:5f:43:
59:50:57:32:ff:17:51:22:ab:3c:0d:96:f0:3f:20:a6:4b:f4:
a2:16:c5:c1:4f:72:52:7e:e6:df:82:5b:ee:1c:79:c3:3f:90:
5a:67:97:63:ea:a2:f3:ed:30:30:b1:be:06:de:57:f4:bf:bb:
73:0c:d0:6e:49:ba:a2:a0:9a:1b:94:f3:6a:dd:96:bf:ff:79:
66:92:5f:23:e2:fb:26:78:2c:f0:71:3b:0b:10:4d:b5:ee:1f:
98:1f:cf:2f:69:d5:19:1d:17:9a:6b:ec:6e:e8:c2:80:28:75:
2e:d9:b4:df:d3:70:32:11:6c:dd:e7:56:db:89:73:fb:82:18:
2a:5c:d1:09:2d:8b:e0:6d:85:49:2b:37:93:d3:00:57:66:e2:
8b:fc:57:87:4c:f4:03:96:2d:56:ce:9b:53:c3:47:ce:26:39:
ba:a0:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:13:04 2025 by rpki-client