
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: iQQJWxKF/GDMZR60tiOP4mq51XyK65s0aQi+ZV5qVOY=
Subject key identifier: 2C:B7:5B:1A:95:DB:6F:1A:4C:9C:ED:3E:EF:A7:EB:CA:3F:ED:39:A2
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 01987E2E9F2F1B4C7B246BBCE36457C4FE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0513
Signing time: Wed 06 Aug 2025 07:00:41 +0000
Manifest this update: Wed 06 Aug 2025 07:00:41 +0000
Manifest next update: Thu 07 Aug 2025 07:00:41 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 6o2vDHSnKRIY7dZk3NrjgnIt2b/6f5aHRDTOhghlrng=)
2: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (hash: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:9f:2f:1b:4c:7b:24:6b:bc:e3:64:57:c4:fe:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Aug 6 07:00:41 2025 GMT
Not After : Aug 7 07:00:41 2025 GMT
Subject: CN=2cb75b1a95db6f1a4c9ced3eefa7ebca3fed39a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:76:ab:4b:03:94:7f:1e:99:c0:63:8c:56:
46:63:4d:26:3b:c3:7a:bd:d6:b5:68:a9:6c:62:f8:
ba:cc:66:38:e8:9c:c7:7e:db:39:09:cf:f3:15:47:
dd:ca:24:8a:28:53:6f:48:c6:ea:12:82:d3:7f:86:
07:25:88:54:78:9c:b5:21:7a:38:b0:82:cc:02:21:
e1:04:c9:73:be:f8:55:be:d1:dd:53:72:71:73:43:
09:3c:96:b7:8b:93:b4:e3:2a:b0:f9:b0:15:9f:e4:
af:c6:bd:09:79:7a:99:4c:e1:b7:ca:9e:c4:36:6f:
1b:d5:a4:3f:57:de:7e:b5:8d:09:58:27:2e:a5:49:
22:28:d0:b7:74:77:a2:52:7f:01:32:07:ec:25:98:
6c:cd:0f:84:86:a0:9d:da:15:e1:f2:97:91:d1:bf:
59:de:0c:20:90:a8:1e:d1:1f:c5:33:d3:7a:23:42:
03:61:c3:1c:5c:2b:ab:ec:6e:8c:ef:8c:dc:c1:b5:
57:85:78:52:52:f5:86:65:49:73:42:6b:41:c9:be:
bf:3d:ec:7e:0e:9f:13:33:5f:71:94:e4:18:dd:bf:
bb:10:0a:45:13:2d:e4:7f:a4:56:a8:a4:0a:49:2a:
08:55:31:cb:95:e7:87:d7:4c:aa:f4:0c:17:27:9f:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:5B:1A:95:DB:6F:1A:4C:9C:ED:3E:EF:A7:EB:CA:3F:ED:39:A2
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7d:c6:3b:e2:25:76:8d:f5:b9:13:5c:18:15:36:ed:b5:43:
22:50:87:49:2d:66:0f:b7:d5:6a:d3:25:f7:69:f9:c1:ea:a5:
e6:42:d1:5d:30:2b:40:97:e8:0a:af:6e:78:ca:ae:18:32:cd:
cd:14:fc:be:b3:3f:22:08:95:7a:21:35:7c:30:18:3b:69:b3:
71:cd:04:7e:a1:d9:fb:6e:29:f0:6b:61:ee:2b:e4:2a:5a:da:
76:f8:4a:c2:04:8d:cb:4b:00:36:3b:c2:3b:89:fa:4e:0c:51:
9c:2d:10:c7:e3:60:a6:7f:97:78:22:57:3e:09:03:88:3d:78:
a4:b4:e6:53:d4:df:82:4f:69:48:8a:b4:dd:61:24:85:e5:09:
b4:f9:b8:c5:89:da:66:78:20:4c:b5:ad:e2:93:35:6a:d4:ff:
48:ef:0e:20:b9:3d:f1:3e:dd:ad:ef:cc:da:c8:8c:32:a0:66:
97:d7:82:36:25:65:5b:69:33:1c:59:6e:33:0a:15:f4:15:bc:
68:6e:39:d0:c0:43:64:9f:64:1e:83:d0:20:cc:e9:d7:73:ac:
20:f7:9e:8e:ac:7c:4a:32:64:f9:71:fa:cd:9d:c5:4f:69:42:
e5:50:7e:39:db:1a:02:c1:e1:4c:e6:62:7c:e4:d8:67:d0:2b:
31:8f:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:18:58 2025 by rpki-client