Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: BV8RP+dZqE/afbdPxvplIvNC3+PUmJZFVuUvNzwppHU=
Subject key identifier: DE:6B:A0:64:0C:C6:13:97:53:F0:75:D5:2D:95:45:2F:CE:DE:7A:F7
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01988FFDF53B10D1C72F7986C50F9CF05CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 07BF
Signing time: Sat 09 Aug 2025 18:00:41 +0000
Manifest this update: Sat 09 Aug 2025 18:00:41 +0000
Manifest next update: Sun 10 Aug 2025 18:00:41 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: r/OdA4W9kTzde8wp88ErmDkESCVurCA3TDPsaItP4J4=)
2: v_98mZARWXkG0c7MrFhUfz1ZnSk.roa (hash: CoGKVro1tI7BKUl2OeE8GJuS6b7gkbb5BZSSNbzRr+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:f5:3b:10:d1:c7:2f:79:86:c5:0f:9c:f0:5c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Aug 9 18:00:41 2025 GMT
Not After : Aug 10 18:00:41 2025 GMT
Subject: CN=de6ba0640cc6139753f075d52d95452fcede7af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:8d:6d:41:61:74:45:66:f7:e7:5e:a7:cd:
97:9a:60:59:d5:81:d4:3e:ab:f9:df:cf:5e:8e:40:
81:4a:d0:6a:c1:26:4f:3d:ae:12:56:cc:7f:e6:85:
09:d4:71:7e:b4:16:f0:44:c2:d7:ba:7a:33:0d:51:
47:41:5e:45:5b:4d:e6:92:51:e6:68:a4:f7:3c:32:
f8:71:7b:b2:69:f7:a7:20:dd:76:21:65:e6:50:8d:
3d:92:79:6d:c8:e4:69:ce:6d:ce:5d:45:0a:e7:b9:
1c:70:ea:f2:d8:32:4c:6a:ab:8b:00:b4:da:d1:fa:
86:49:09:a0:81:2e:26:55:ce:e0:fe:c1:2d:2f:23:
f4:1d:53:0b:5d:cd:f6:29:b0:86:cb:c0:fd:4b:8f:
ac:e3:70:a6:49:c6:8a:c4:d4:a1:c6:4e:4e:f3:d2:
89:7e:33:30:4d:d6:a0:af:2a:b5:91:bb:36:9c:6e:
e1:f1:0e:f0:98:92:5f:8b:f4:1f:dc:2e:0c:46:69:
2c:07:a1:8f:8a:36:d6:dc:53:10:91:32:8f:e3:6c:
5e:68:9f:71:5a:b3:c5:70:e6:3b:6a:34:4c:9b:20:
5d:c1:67:ab:3e:e4:ae:12:e2:17:56:20:82:08:82:
63:6a:3e:36:89:62:30:92:2d:23:b1:41:b3:3e:25:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:A0:64:0C:C6:13:97:53:F0:75:D5:2D:95:45:2F:CE:DE:7A:F7
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f3:c1:70:27:5d:41:c4:70:6a:41:81:3a:84:5d:a6:fb:09:
c9:77:54:af:cf:7b:b2:c2:f9:f0:8b:3b:3a:3d:c7:a1:b8:f2:
8c:2f:a1:13:d8:fe:09:c9:2d:02:b4:79:a0:9e:55:45:60:d3:
65:d7:cb:a9:49:06:27:68:8b:af:d4:9a:7e:d7:74:de:72:4c:
35:97:c3:27:90:e8:94:85:17:40:54:6c:95:3d:62:1d:17:d5:
ea:59:a0:15:03:cf:dd:4e:fa:0b:55:72:b6:65:87:98:ea:86:
c5:fe:5e:ce:4e:77:4f:18:c5:56:57:59:c9:4e:f4:fc:fb:04:
c5:10:9c:56:51:d6:38:1b:d0:93:0d:95:64:0c:b8:0e:68:7d:
72:3d:c7:0e:03:70:84:39:8e:1f:10:58:08:e9:72:34:83:c1:
3b:3b:02:4b:af:99:8d:62:6e:a9:48:42:f2:b6:2a:dc:f0:84:
e1:32:23:a9:44:a6:86:f9:db:92:52:f6:ab:cf:f6:6b:05:65:
fa:89:79:26:03:00:43:7d:a9:29:6c:c2:e9:04:74:ac:ab:d8:
fe:7f:22:5c:17:d8:f8:78:e6:72:d6:09:b5:0f:9e:47:6a:46:
82:a1:e2:42:6e:e2:ba:ac:74:b5:83:bd:7f:5a:5d:5f:51:ce:
1a:8a:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:25 2025 by rpki-client