Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: WV83+YaHlYNUWJVMrxlxeZ/yb2vsBZUVOLvP/XRB7F0=
Subject key identifier: 86:37:8E:CF:E1:13:3F:94:00:61:22:3C:34:F6:7D:CC:05:1B:AE:03
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01987DF8949F5183855FFA0BD565409DF3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 04EA
Signing time: Wed 06 Aug 2025 06:01:39 +0000
Manifest this update: Wed 06 Aug 2025 06:01:39 +0000
Manifest next update: Thu 07 Aug 2025 06:01:39 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: ivm2+r1SxTFy0Wby8frTqSFlaB8WpusLYeIJOs/wM1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:94:9f:51:83:85:5f:fa:0b:d5:65:40:9d:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Aug 6 06:01:39 2025 GMT
Not After : Aug 7 06:01:39 2025 GMT
Subject: CN=86378ecfe1133f940061223c34f67dcc051bae03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:00:7f:1a:d4:34:48:b6:7b:30:5f:f3:bb:
77:11:d9:e6:3b:94:72:6b:f1:df:d7:9c:e8:47:cd:
16:82:85:b3:ed:51:b0:28:c0:26:ea:46:6e:2f:74:
19:0a:d7:76:5d:34:e9:06:c6:66:ba:21:1d:12:63:
db:d7:d8:26:60:f8:0f:05:c5:96:4b:b1:26:21:c5:
c5:85:f1:82:6f:e8:42:3d:76:1d:11:87:91:7f:b6:
44:89:71:db:4d:10:03:df:84:87:08:75:5f:27:da:
85:63:da:5c:97:51:fa:7f:d0:56:bc:51:fa:d4:d8:
00:bf:80:87:56:1f:10:4e:65:73:98:27:62:de:2c:
57:c5:57:32:a4:d3:65:e0:bd:40:f0:dc:9c:2a:60:
df:77:05:c5:83:01:23:ef:b1:ec:22:f1:d6:7c:89:
1e:af:46:98:87:09:7b:78:59:64:a8:e9:da:2a:01:
a0:cb:54:86:04:9b:42:97:a6:09:d3:b2:56:97:34:
ef:03:55:17:35:33:fa:f2:05:ea:e0:51:a8:19:f4:
3d:56:0d:3b:8e:a4:2e:29:80:4c:0d:b3:bb:af:ea:
8e:0f:df:a1:d4:e3:4f:e0:5e:e5:b9:7f:03:4d:55:
3d:4b:77:fc:ee:c8:af:90:11:bd:cf:1f:ab:0b:ac:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:8E:CF:E1:13:3F:94:00:61:22:3C:34:F6:7D:CC:05:1B:AE:03
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:09:a7:13:59:69:20:96:93:01:74:55:a2:13:e1:11:3a:
10:76:49:6f:2a:8e:bb:5f:7a:b2:a3:6c:7b:21:1f:3c:ea:94:
c5:b9:07:4e:78:bf:bb:f4:ab:07:92:d5:53:0c:63:c9:39:b3:
9f:43:85:4e:3e:4b:5e:ec:39:45:3d:1b:fd:26:30:97:91:e3:
39:5e:90:3f:71:b8:10:14:c3:04:06:5b:0b:55:24:08:c7:11:
ef:ea:c5:53:a2:6e:d3:44:ed:24:b2:53:ae:ca:15:40:fc:40:
76:a8:90:40:e6:e0:56:12:33:b1:e9:3b:8c:55:84:1e:f4:1f:
eb:6c:a4:16:36:fa:db:ba:5b:a0:9d:9a:62:b3:9d:00:57:95:
f7:2b:bc:88:9d:18:39:f7:ac:6a:51:02:e3:68:ac:1e:fc:dd:
66:80:53:66:c9:1e:dc:62:17:13:32:5f:68:df:72:1a:3c:27:
7b:59:d8:d2:e7:df:13:a0:46:85:ad:a6:ce:03:49:f4:cf:e0:
c2:eb:45:26:24:72:1e:35:f1:31:c9:44:13:93:0d:4c:4c:b6:
c9:61:42:9b:ac:3f:2a:de:34:13:9e:3b:3a:62:3a:85:2f:3d:
71:ad:73:a3:fd:4d:d6:9c:7f:d8:b3:95:61:fb:93:1a:5d:c0:
0e:cd:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:08 2025 by rpki-client