Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: GaJ2wF+N/S/FDPBpaukvgtxkHKtvDeqT+wTT1ujvzQQ=
Subject key identifier: EA:DA:5C:DE:F5:8B:C1:4A:59:FC:49:E8:5D:0D:DE:1B:8E:BF:C3:1C
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 019921B290924F2C3ED65323CAE017AE63BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:54 +0000
Manifest this update: Sun 07 Sep 2025 01:02:54 +0000
Manifest next update: Mon 08 Sep 2025 01:02:54 +0000
Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: 4hk4WKk/+jUSc248z53V8+xsqcQa4uBAVdNcwc1+5Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:90:92:4f:2c:3e:d6:53:23:ca:e0:17:ae:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Sep 7 01:02:54 2025 GMT
Not After : Sep 8 01:02:54 2025 GMT
Subject: CN=eada5cdef58bc14a59fc49e85d0dde1b8ebfc31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:bc:c4:d7:5d:df:ba:4e:89:9c:53:38:4d:
34:33:d7:53:f2:f7:06:79:55:3e:2c:4a:41:6d:c2:
06:c6:bd:05:11:f9:24:4f:4f:b1:f2:d4:2b:a0:78:
70:2c:94:c9:e3:a6:8a:96:ec:41:7c:95:1d:b3:7e:
70:29:65:4d:33:e5:75:7a:f8:38:b7:62:92:65:1b:
85:54:5c:28:e1:aa:74:71:4c:94:28:8d:cf:38:98:
9b:2f:63:c2:99:c3:95:fa:ee:25:27:2e:fd:26:a6:
8c:1e:bd:30:18:da:8e:57:87:f3:d2:96:cf:4f:45:
05:ec:4a:91:1f:05:53:2c:62:83:44:38:e1:76:75:
20:3d:53:a8:e0:0e:9a:11:ce:2b:61:56:6a:e4:27:
80:a1:55:3a:df:74:2a:07:a1:d9:fa:1e:52:38:65:
96:d2:aa:59:e9:ce:f6:c0:5b:da:b7:f3:3f:95:89:
3e:aa:57:bf:e1:d1:80:6a:c1:ea:59:14:04:c7:47:
31:7d:f0:e9:31:ec:27:0b:85:47:4f:2e:48:f8:ac:
e4:5e:ba:cf:ee:fa:34:3c:62:83:0d:32:8b:04:23:
ea:dd:d2:34:b8:ea:4c:2f:ff:0f:c6:24:f2:3f:e9:
d3:77:e4:3c:ef:d5:9e:26:bb:3c:49:06:18:68:a2:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:5C:DE:F5:8B:C1:4A:59:FC:49:E8:5D:0D:DE:1B:8E:BF:C3:1C
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b0:26:38:31:27:37:a8:fe:90:55:02:21:30:da:70:ba:ec:
ff:3b:11:43:b1:e4:9f:ac:22:39:3f:29:63:0d:ee:1f:ab:20:
d1:c1:51:63:32:8f:18:e8:65:56:60:b5:8a:ec:f9:0f:92:ba:
49:e7:25:32:9c:e4:de:5d:76:5b:28:c4:cd:66:1c:9d:a3:13:
57:1d:56:ce:ba:a4:cd:1f:51:aa:9a:97:9f:e8:11:c5:82:3a:
25:8c:0d:bc:ac:48:7b:aa:6c:40:b7:08:9d:35:75:d8:32:7c:
c2:d4:b5:80:25:7f:5c:77:c9:4e:ae:e4:90:39:77:e1:7a:50:
a2:cf:4d:9e:40:65:dc:d4:ce:0f:6b:2e:41:ca:80:ad:ac:02:
83:ca:00:ed:4d:80:c2:ba:2a:cf:61:3b:19:7c:14:de:f4:da:
2f:09:2f:7d:1c:b4:82:d1:bc:b9:d3:c4:66:89:d5:17:53:f6:
d0:dc:1d:83:2b:29:d3:c3:0a:aa:76:bf:b3:c6:21:81:ec:28:
0b:b3:60:0a:6e:b8:bc:2d:d1:af:1c:0b:95:05:2a:5b:28:a6:
19:b1:6d:8f:5e:63:3e:4a:0c:98:d4:f2:c0:d4:2a:22:48:26:
b7:68:66:e8:f7:24:4d:0c:97:cf:5b:53:39:9d:cb:9d:df:18:
23:4f:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:26 2025 by rpki-client