Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: 18S5cChlMHS/720k/NbqBv0sYrvcZL+tvD2JBB0X914=
Subject key identifier: 18:58:7B:E5:81:EF:5E:85:58:D1:44:B0:66:ED:78:3B:AB:1E:50:61
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019922FA0EB6D93B90A3596A547DBE5CA155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 06D1
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: huDLYT3jGQ2uT/vpsSjQxi+6T775WzD9TAVi3xrLiIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0e:b6:d9:3b:90:a3:59:6a:54:7d:be:5c:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=18587be581ef5e8558d144b066ed783bab1e5061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:08:98:16:2c:6f:4f:c6:d1:f0:c3:db:7c:
b0:08:08:0a:ac:5d:06:50:e9:88:a6:2a:05:09:66:
9c:70:fd:70:e5:4d:8e:e4:3e:75:c4:e9:df:2f:ec:
62:ad:ce:06:1c:11:b3:e1:80:9d:3d:3d:87:b8:7b:
53:89:14:4c:95:4b:8a:6b:8f:c4:ed:af:d1:df:43:
b6:47:1a:99:63:b0:6f:e0:05:aa:15:7a:b2:43:84:
d5:f5:8c:fb:8c:d4:77:4d:42:49:57:4c:7b:8a:ef:
b1:94:8d:f2:20:95:83:e4:85:1c:f7:93:e6:46:84:
1b:fb:d2:a3:28:8e:67:1b:dd:80:38:ea:ca:bd:5a:
a0:b9:7c:fd:e9:aa:71:7e:cb:32:37:91:e1:e4:96:
78:c9:fe:c4:20:ef:c2:dd:26:b5:27:21:97:e1:b5:
60:e6:92:90:bc:b4:18:67:1c:32:6b:56:21:72:98:
6e:25:ff:13:02:29:5d:73:58:5a:e6:9e:d8:bd:04:
b7:06:1b:95:90:a6:62:46:c6:b0:56:3f:3e:95:b2:
83:ea:10:24:a2:5f:2f:f6:b9:ad:f0:17:c1:75:fc:
ea:a2:d3:17:86:8e:01:8a:80:30:bd:6d:48:df:d9:
1c:04:9f:9a:f4:de:13:9a:07:2b:ee:9e:69:87:19:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:58:7B:E5:81:EF:5E:85:58:D1:44:B0:66:ED:78:3B:AB:1E:50:61
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d0:e9:34:15:f1:d5:0f:03:98:eb:f2:33:58:db:1a:86:a4:
22:b0:5b:cc:21:e4:ed:70:b9:f2:d8:f8:8e:33:02:2f:99:2e:
86:56:1b:c2:e6:d4:66:2b:2a:2b:7b:d1:b7:f5:27:ff:a1:0d:
29:c5:ac:f3:4a:f6:8e:a4:f3:4f:df:e4:bc:c7:68:62:09:0e:
a7:64:bf:04:9a:02:02:f6:a5:f6:e5:5f:6b:ad:b6:f2:1a:41:
ee:e9:25:17:4f:0f:38:f5:a5:45:44:39:1a:db:45:d4:41:df:
da:3b:a9:0c:55:6e:b3:d4:58:6d:9c:ba:0e:95:be:f1:97:1a:
db:ff:87:3f:2f:12:3f:d2:a7:4b:e7:c1:80:55:b7:e8:84:08:
99:b7:de:0e:27:d5:d7:03:41:0d:5f:64:4c:a7:7e:a1:9b:19:
a6:54:12:19:c5:73:4e:55:9e:00:d6:f4:e7:df:ed:47:b8:f0:
2d:dd:2a:cb:f4:1c:3d:7a:29:03:30:2c:39:50:1f:88:f3:ef:
61:bd:a0:bc:16:90:d2:59:76:63:81:e1:a9:b7:21:78:44:8b:
f2:5b:70:b3:80:46:c3:91:b8:3f:84:6e:0e:a7:06:5b:6a:8e:
03:d6:62:10:d4:e8:34:4f:19:27:eb:0d:2e:4c:2b:91:03:44:
b3:37:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:43 2025 by rpki-client