
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: Fla7PKPfK7RWnqzhV8xhJKM8AE/hbCQJbt7s+FB1IiQ=
Subject key identifier: 67:D5:19:2B:4F:8C:32:C2:F3:7A:7D:58:7A:01:13:5E:68:A4:C2:04
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019881D5596F7B26BF9012D24947F7544998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1636
Signing time: Thu 07 Aug 2025 00:01:39 +0000
Manifest this update: Thu 07 Aug 2025 00:01:39 +0000
Manifest next update: Fri 08 Aug 2025 00:01:39 +0000
Files and hashes: 1: A6WXTZEzXmIQ_NgfUonzU2PUwgA.roa (hash: woiA9rRwDxAjmj0pEa4K5XOpCIKapMbaEdUIwATG6G0=)
2: S_-0FDIrVQDzaijY6VxqByAB1lc.roa (hash: TfqMFDdllR/MppgsJbJ3DDwOFZhjdMJFII0e9w5g/s0=)
3: YMJHPYOCkpMfZfNHoGYeBjxWaOI.roa (hash: yJjrgN8kBsEfpA42zaZLGGIadnU9Q2CCBpQQsiqKfFk=)
4: YS8EyL0X_H_c4qE4GwI1B17qR08.roa (hash: 3DDadYTlUG0bmqRy14MjCUdovVAeoV0aa85eQ5tBk7Q=)
5: nna5EA2g1qX6KviopTAzfZKYgqM.roa (hash: +1+cT+lcsXs8CMprSc3uLnHvYXXY0ACjWW6HRhv0N78=)
6: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: Ugs8zGbA7i1UY/pcg/IAdVdzyAlDDUB/0aGOCYDR40A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:59:6f:7b:26:bf:90:12:d2:49:47:f7:54:49:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Aug 7 00:01:39 2025 GMT
Not After : Aug 8 00:01:39 2025 GMT
Subject: CN=67d5192b4f8c32c2f37a7d587a01135e68a4c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:6b:91:c6:4c:3b:02:7e:2b:f4:64:3b:81:
ac:88:52:40:c2:c0:16:73:36:96:fb:40:72:82:74:
b7:77:00:a9:93:5e:9d:b9:b0:10:98:db:ef:f7:5c:
ad:d4:e3:3a:8c:ee:28:e4:7b:93:49:9d:b3:50:7a:
82:f0:3d:5e:f6:73:5b:7e:9c:63:2f:fa:84:ae:d8:
38:8c:6e:bd:3a:70:08:fd:c7:e2:69:bf:9f:b4:d4:
a5:7b:2b:24:33:fd:92:e1:7b:f2:46:39:08:45:e7:
41:74:16:bc:ce:30:0b:ac:96:9d:4f:55:1c:d4:97:
fc:d8:f4:38:5d:8f:8a:11:a7:09:a5:f2:ce:04:39:
65:8a:ba:c9:ca:ea:4e:3a:5e:69:81:87:2e:5f:5b:
2f:f7:a9:df:aa:26:4e:5d:ef:97:52:58:fa:34:17:
4e:79:db:d8:dc:ff:cf:f6:28:4e:9a:91:31:79:d4:
8e:0f:17:d0:ba:43:c7:9b:ff:11:07:03:7a:b2:da:
21:75:66:e8:e8:c7:f1:8e:66:e6:ac:e4:64:b7:27:
8d:fe:a6:e5:09:bb:1b:fb:42:81:6e:22:58:bc:2f:
9c:ad:5e:55:d0:7c:4f:cd:ee:84:98:67:ac:6f:b8:
f3:13:41:d9:1b:d4:eb:d4:30:85:ae:e0:fa:8c:12:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:19:2B:4F:8C:32:C2:F3:7A:7D:58:7A:01:13:5E:68:A4:C2:04
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:58:0d:56:e3:f8:c4:b9:f2:f5:d6:86:60:20:04:6e:57:ed:
a5:56:35:62:87:80:de:a8:c2:f3:ad:f2:4b:a7:1c:29:9e:e0:
72:be:3c:53:66:5e:54:da:2b:c8:63:ce:dc:a0:f1:35:e4:b3:
57:5a:f6:7d:6b:87:6e:87:08:e8:cf:c5:7b:6c:1f:87:00:bc:
00:9b:2f:fb:d7:63:3c:86:c4:8f:f9:25:61:6f:71:a7:18:f1:
ff:03:4d:e9:a1:b9:dc:8b:db:0f:87:33:25:09:b9:d4:9a:21:
50:2f:dc:3f:7d:1d:35:d3:2b:0f:d3:95:c4:01:95:c8:23:54:
f7:a4:55:cf:2d:4f:d0:69:cb:00:0b:c1:35:aa:5c:35:56:ca:
98:d6:47:b1:f1:9b:b8:ec:df:ac:73:17:c8:85:b3:c8:ab:3d:
1f:ca:63:a7:18:07:e0:69:9f:ef:b9:b9:66:5e:d1:22:b9:bc:
dc:59:b4:55:0d:e1:fb:d2:ff:1a:3e:48:b4:33:6b:49:5b:bf:
37:8f:07:74:e5:1a:87:7a:f8:83:ef:9f:3a:7d:9c:76:d2:dd:
2f:63:a1:3a:36:55:ac:b4:b6:84:aa:b8:09:5c:5a:d5:d9:07:
25:62:f6:e9:d9:e5:35:63:e8:31:83:35:8f:be:1a:ab:9b:31:
bd:77:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:42 2025 by rpki-client