Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: nLmp0NOxfAchbIQtFQOUMOQb5A9N6CsAYtOJr2+Y7XE=
Subject key identifier: AA:59:B3:66:87:35:8D:B7:4E:9D:FB:F0:BD:16:5A:8A:7D:43:0E:70
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019935A55435D6150ED1DA73E94B4BE34CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0B0A
Signing time: Wed 10 Sep 2025 22:00:51 +0000
Manifest this update: Wed 10 Sep 2025 22:00:51 +0000
Manifest next update: Thu 11 Sep 2025 22:00:51 +0000
Files and hashes: 1: XFrF4ZD8RKmENGKuXlNfyh9_oV8.roa (hash: Syc9HmjiF/DkUOhl4IVh1oQ9jwD6L7ptWtUgxSy9ut8=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: o9Fw9ExSpMXUmJGuoXMLgexZ7DDDJ4glpL+aYpqbBYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:54:35:d6:15:0e:d1:da:73:e9:4b:4b:e3:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Sep 10 22:00:51 2025 GMT
Not After : Sep 11 22:00:51 2025 GMT
Subject: CN=aa59b36687358db74e9dfbf0bd165a8a7d430e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:fd:1e:18:e0:c7:ab:11:1d:5f:b7:08:5d:
38:e5:83:e0:9e:e4:ba:6b:0e:16:d3:31:dc:18:e3:
38:e0:dc:5e:6e:40:db:b4:87:88:71:75:62:87:98:
07:32:99:22:69:cf:2a:eb:3c:67:4b:4e:7a:30:8f:
77:d5:7c:cb:56:c1:bb:7c:27:3d:e8:65:32:47:0f:
d1:af:80:a3:d4:7d:91:80:bd:13:48:df:01:ef:0f:
f5:49:1c:84:75:f4:ff:b8:1f:cf:2a:51:e7:9a:ec:
00:6f:1a:41:2b:4a:69:7f:70:cd:e4:96:3b:d4:f1:
e7:fc:de:2b:33:98:09:87:d3:48:ca:c8:5b:8c:cb:
e2:61:e5:ae:3d:f6:5d:6a:9b:64:13:7b:f0:b0:5b:
7f:a7:5c:ec:b7:8a:ed:2c:38:75:82:c6:cf:79:bc:
c0:fe:05:3c:8c:ec:91:78:34:cd:1e:7b:2f:37:3e:
71:93:74:c5:c5:b8:6a:4a:ac:21:2b:8e:48:e2:2c:
77:27:94:e5:63:96:81:58:a8:0e:3e:11:3c:81:40:
44:2c:c1:f8:40:8f:b2:4d:94:f3:d4:76:12:fb:6e:
1a:51:5f:62:d3:25:52:08:f8:55:3f:f3:ec:33:b0:
94:e5:81:fd:b0:63:ca:49:ca:92:b0:d6:b5:83:f6:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:B3:66:87:35:8D:B7:4E:9D:FB:F0:BD:16:5A:8A:7D:43:0E:70
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9c:21:54:0b:3f:61:4e:c0:09:1e:3a:1b:79:35:c6:cc:81:
6a:41:a8:65:53:97:c6:c2:80:31:a4:cf:a4:45:7e:32:8d:52:
49:5c:3e:1b:03:ed:3c:04:02:fa:47:7c:e6:1c:ad:bc:67:6c:
59:4d:24:7c:52:33:aa:74:99:13:60:2c:90:2c:a0:50:9e:a0:
f2:ca:45:67:3b:c8:d5:ac:e9:66:df:4b:7f:d3:6d:46:3a:fa:
98:97:21:01:e7:ba:53:3d:e3:7f:14:37:ca:d0:03:50:6d:6b:
bf:65:27:5b:c0:8f:18:e1:e9:e5:e3:d4:2c:4d:bf:d2:bc:01:
48:3c:a0:35:83:f8:04:47:8b:78:64:60:fb:56:f4:74:93:df:
c7:55:db:83:00:79:13:bc:58:bb:c0:d4:b9:be:2e:e9:95:a9:
14:7c:d6:55:f1:76:02:bb:24:8a:ed:83:1c:72:2d:98:ed:b5:
d7:21:cd:74:ce:63:9a:bb:aa:a5:4e:31:9e:19:82:2f:86:55:
8b:79:2c:54:02:7c:7b:dc:35:ee:25:bb:6d:f0:ad:4b:d9:4d:
fd:70:db:ff:cd:24:eb:26:ee:e7:01:c3:c5:a5:bc:0a:2d:29:
bb:5f:f4:5b:ee:49:8e:14:d0:75:8a:8a:05:5f:88:32:b7:91:
e8:5e:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:26:34 2025 by rpki-client