Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: nU40QvP5dC14zDiY7/ChLXvME7n/XpijSA/oNJp+YJI=
Subject key identifier: 85:3B:53:69:DA:66:7D:0C:CD:A9:D7:D0:F2:46:13:50:E8:8D:C9:35
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 01987B9B774D338D4382A7B560A2E576F1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0D36
Signing time: Tue 05 Aug 2025 19:00:42 +0000
Manifest this update: Tue 05 Aug 2025 19:00:42 +0000
Manifest next update: Wed 06 Aug 2025 19:00:42 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: iD6b6da21TexdEV72XvJ7sCeXcl2MgnoTcjEeSnmRBI=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:77:4d:33:8d:43:82:a7:b5:60:a2:e5:76:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Aug 5 19:00:42 2025 GMT
Not After : Aug 6 19:00:42 2025 GMT
Subject: CN=853b5369da667d0ccda9d7d0f2461350e88dc935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:ca:b4:03:b1:96:dd:78:f1:3d:15:7e:f3:
fd:2c:dd:08:6b:0c:52:51:e2:70:fb:e6:da:89:62:
a4:b7:52:c8:34:e3:e4:02:dd:c2:2a:c6:c9:a1:1f:
d6:3a:d2:e8:9f:c8:05:aa:95:f9:28:3d:56:f2:41:
c8:21:71:d0:00:b5:14:b8:58:03:a3:0a:89:0a:17:
e3:4b:34:4b:64:6c:1e:d6:c9:3e:36:97:1c:a8:09:
5b:62:73:fb:36:6c:17:c1:2d:19:c6:b4:f7:3d:50:
03:f9:fb:c8:54:cf:fc:17:1c:7a:6c:fd:c9:ae:51:
47:8f:33:7e:f8:fc:87:90:51:63:55:34:d7:58:01:
4c:58:54:b1:32:cd:f6:05:7f:66:d5:62:92:98:c8:
0a:16:b0:5a:15:51:91:96:4f:b6:3a:d1:41:98:5c:
50:75:4a:f8:13:bd:08:38:58:01:d7:b3:43:19:29:
64:8b:e1:2f:7d:2f:0d:33:ac:5a:aa:ff:2d:5a:78:
7f:0f:06:8d:b8:d6:9b:20:4b:39:9a:41:03:66:c2:
ec:d1:87:84:22:95:47:18:c5:50:05:3a:b0:8b:6b:
1c:aa:58:66:fd:c7:36:05:5f:5d:86:ba:1d:89:b6:
60:75:58:9a:ad:c3:20:75:b2:2d:26:fd:ed:ee:ff:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:53:69:DA:66:7D:0C:CD:A9:D7:D0:F2:46:13:50:E8:8D:C9:35
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:94:5e:35:00:41:06:69:3d:3d:fc:e4:0f:86:12:25:2c:d6:
c8:d4:cd:b7:8c:0d:7f:de:a1:b5:0e:45:f4:34:8d:fc:db:88:
af:7d:ac:82:ea:a7:d9:a7:9e:99:26:52:ea:6a:b3:5a:e1:e6:
63:a7:68:13:21:00:63:37:84:aa:5b:0c:10:ff:e0:66:c9:7d:
72:02:06:8b:9a:66:90:a0:d5:f6:b3:d1:58:e8:94:e8:d9:03:
05:2c:fd:7d:ee:ad:ca:d1:73:ce:d8:2e:38:b4:f6:22:49:74:
5a:a5:bb:03:dd:bd:6c:03:87:19:05:52:f9:53:e3:bf:03:50:
d7:2e:87:c7:80:20:70:3e:92:68:08:b4:6b:c5:a5:75:57:25:
a0:93:0a:58:88:fd:41:0a:af:c8:64:33:79:58:4a:5d:e4:05:
ab:c9:d2:08:f3:95:56:2e:c6:75:cf:8e:23:5e:1b:64:7c:e0:
8b:b4:b0:41:cf:2f:24:7b:d5:7e:96:6b:49:b1:83:31:45:f9:
a6:44:01:13:79:21:a0:4b:b1:d8:85:79:e8:c8:20:09:dc:a7:
59:25:af:ad:f6:fa:2a:6c:ad:ef:71:c9:56:b1:a0:4e:2e:1e:
22:a4:d3:ca:96:98:2a:61:95:d9:3f:07:eb:b5:63:de:09:fb:
ab:b5:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:59:51 2025 by rpki-client