Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: A3OTEPXnBEX3IBwecQDfMVzJ0k9hcavuDEASc0DroqQ=
Subject key identifier: 2F:27:45:B2:62:18:F7:F8:E1:A9:45:C8:FD:CE:90:C8:4D:D7:ED:ED
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 0199221EC2F64018E6B7F0ACDE326F9698BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:05 +0000
Manifest this update: Sun 07 Sep 2025 03:01:05 +0000
Manifest next update: Mon 08 Sep 2025 03:01:05 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: c6xTI0UjRWqgGyjQRRz3bj1Xx0acvLzO7LWWV0FvqTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c2:f6:40:18:e6:b7:f0:ac:de:32:6f:96:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Sep 7 03:01:05 2025 GMT
Not After : Sep 8 03:01:05 2025 GMT
Subject: CN=2f2745b26218f7f8e1a945c8fdce90c84dd7eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:f5:a8:6c:68:ee:2a:90:0d:8b:0c:ff:c1:
1b:06:49:98:5f:b7:70:67:8d:99:2b:bf:62:9e:c3:
e6:85:ee:81:56:a0:09:de:87:ae:1e:ba:eb:26:2a:
1a:c3:24:f5:1f:1d:91:c9:18:ee:ad:26:1e:f3:73:
3c:54:62:b9:40:2b:d3:04:f9:d9:32:22:a2:5a:55:
74:46:0d:6a:43:8e:a1:47:fb:0e:ab:f5:80:ad:d1:
98:03:c7:97:9d:9b:c7:be:8e:59:72:e9:96:11:d8:
35:1a:a1:0e:f2:0a:8d:19:16:21:44:f6:ec:90:28:
a8:8b:9d:d2:c6:49:24:39:7b:08:f6:9f:04:b0:f6:
73:01:3f:3b:00:0b:e6:4c:f4:1e:48:f9:2a:83:2c:
95:1b:d3:d1:86:78:c8:bc:fd:6d:0c:91:ec:07:e2:
ca:33:25:18:9a:61:48:b1:60:3c:8c:23:82:02:39:
ba:33:e1:b7:fa:86:0e:3c:d5:92:8e:a6:0d:98:ea:
b7:81:98:2a:81:0a:1b:58:30:14:de:32:a6:93:3d:
f7:07:68:0e:8e:0b:8c:31:0b:02:15:16:0f:f6:76:
68:ff:0c:da:05:59:60:03:61:76:d2:3c:56:72:76:
45:b2:b2:59:10:df:42:89:ba:95:97:c5:26:f8:52:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:45:B2:62:18:F7:F8:E1:A9:45:C8:FD:CE:90:C8:4D:D7:ED:ED
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:f7:31:c3:38:f6:c1:83:42:8c:bd:0b:3c:27:de:b3:71:
c0:44:2e:64:42:90:b3:47:df:97:65:0d:66:02:c6:dc:a0:1a:
a2:05:50:e7:61:c8:66:70:f9:30:83:9e:39:d9:45:30:a8:c3:
66:5e:d6:49:15:7e:a0:76:40:9f:3a:30:59:7c:72:5e:52:d6:
21:89:17:a8:5f:39:2b:9e:78:c3:9c:1c:08:fd:e5:8b:78:23:
b7:fe:83:2c:ad:73:11:42:f0:68:0f:51:6a:79:9d:2a:60:2d:
aa:ef:ca:a5:6e:62:d0:bf:ee:f7:9e:32:1a:c5:d6:05:e3:d1:
ae:ea:29:14:a8:c3:55:c9:0f:a8:db:ea:23:41:0e:34:81:fa:
f4:f5:f3:a0:96:9e:b2:c4:80:ce:ed:b2:03:0f:da:d8:61:c1:
3d:b0:9c:c2:48:59:fe:0d:a3:c5:ea:89:d0:ba:83:65:02:a6:
38:0d:44:64:8a:f8:fd:9b:90:6c:0a:9b:a1:e6:e4:f6:d6:8d:
c7:5c:7c:68:12:6a:0a:e7:97:f4:81:00:c5:54:06:6b:1c:c8:
5f:13:0f:2c:78:ba:b4:8f:98:c0:f2:2b:8d:93:71:1a:71:37:
66:cb:ca:bb:5e:57:08:30:4c:7d:ce:69:da:1b:fb:ac:0f:47:
54:45:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:32:59 2025 by rpki-client