
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: wikUSmegAZrLGFHsXZbREtr7q/53vCrFsuHd5B80ZeM=
Subject key identifier: 5D:D8:E8:06:0C:E9:13:87:59:A1:34:81:9E:90:59:D0:D8:63:A1:8E
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 01987F79F8A3EA25DA81F93E9EBDFD097728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:02:36 +0000
Manifest this update: Wed 06 Aug 2025 13:02:36 +0000
Manifest next update: Thu 07 Aug 2025 13:02:36 +0000
Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=)
2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: O5pmP08X4lENm4rBZJAPrUQfxkKKeBKMk2uw0iV0BlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:f8:a3:ea:25:da:81:f9:3e:9e:bd:fd:09:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Aug 6 13:02:36 2025 GMT
Not After : Aug 7 13:02:36 2025 GMT
Subject: CN=5dd8e8060ce9138759a134819e9059d0d863a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:95:bd:75:43:52:7f:e9:b9:75:96:b6:79:
b8:8b:ba:91:0c:13:18:c6:40:22:5b:b8:98:0e:d8:
de:ba:c4:cf:eb:d9:02:f9:e9:b9:0c:1d:57:69:61:
6a:7e:d9:9b:15:d0:f0:f9:3f:26:5c:af:33:33:01:
c6:31:33:81:58:de:52:e1:17:a6:44:38:9e:58:b0:
68:35:00:97:92:3d:7f:c0:9a:96:0b:83:6a:fb:5c:
98:9f:f2:39:9e:b7:d5:2a:6d:35:d5:83:40:8d:10:
fa:45:e9:9e:0e:c0:73:39:c2:46:44:25:70:54:dd:
d4:4c:23:ed:7a:18:60:27:a5:cd:2d:bf:7e:46:2c:
3f:a3:1f:8e:95:f9:bc:78:09:03:96:ed:61:a4:6d:
52:f8:b1:4f:c6:4e:74:0f:ad:b7:0c:01:5a:e3:99:
35:24:2a:07:7f:b4:6b:e7:24:5f:f6:37:00:cc:cd:
55:63:8a:41:fe:25:97:f7:63:68:f5:24:cf:bb:24:
a9:bd:70:51:92:5b:e9:98:14:c5:15:13:9d:10:29:
f6:d5:03:88:5d:5a:93:47:a3:c7:19:47:95:97:fb:
d5:9e:0d:0c:c9:63:62:42:c3:44:15:8e:cd:b0:1a:
f2:6f:39:0a:df:87:de:7a:65:36:f6:9b:b5:a4:df:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:E8:06:0C:E9:13:87:59:A1:34:81:9E:90:59:D0:D8:63:A1:8E
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7a:9e:03:a4:11:f0:68:7f:6a:f0:6b:b5:4a:4b:a9:ee:fe:
9f:53:f9:74:8d:8c:18:c5:f3:5b:54:6d:71:a6:8d:f1:c8:3c:
7b:1b:b6:6c:f3:f4:8e:6a:42:46:fa:9c:f5:19:94:e8:30:e2:
09:f4:7a:b5:5c:97:3d:3a:12:80:27:e0:92:f3:76:25:53:e8:
98:34:91:df:ac:e7:8c:6d:c4:69:83:7a:8d:3d:71:78:fb:ac:
47:3e:df:30:18:fb:6d:ee:90:1a:6c:c5:2e:b4:02:40:50:e1:
d0:b4:0a:9e:c2:43:74:bb:d0:b8:c6:d8:07:d3:d3:53:e0:1e:
ca:01:0e:34:a3:3b:c7:31:66:32:38:76:0b:b2:c6:0e:ac:08:
c8:89:23:62:92:69:9d:0b:8a:df:84:e2:28:0b:5e:9f:d1:cf:
d2:4a:f5:8d:31:e8:8f:ec:48:de:87:29:91:02:a3:fa:e7:e2:
f7:62:b6:27:2d:d8:ba:71:4e:ba:18:86:9b:7f:f1:fc:73:d0:
66:c6:38:83:a3:ec:b2:8b:0b:09:60:84:57:98:0c:64:74:a9:
42:a0:b4:f3:79:2d:c9:69:51:12:39:cb:95:40:27:3b:4f:63:
1e:ac:6b:1d:08:87:ea:f2:2a:55:69:59:69:57:1a:bc:0a:b9:
95:5c:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:22 2025 by rpki-client