Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
File: kWV5napb3fL1Nt2BtybPrtDmCFs.mft (raw, json)
Hash identifier: jcJGxyzFhkzbDTRDrLFjwLmCGo9Z+lKKag1Z6xNG99Q=
Subject key identifier: 0D:87:45:1B:69:4A:76:E0:83:E9:04:F8:84:20:32:AE:D2:8A:57:52
Authority key identifier: 91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B
Certificate issuer: /CN=9165799daa5bddf2f536dd81b726cfaed0e6085b
Certificate serial: 019873E2120FB29CBB22F5D728F91598BDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
Manifest number: 90
Signing time: Mon 04 Aug 2025 07:00:52 +0000
Manifest this update: Mon 04 Aug 2025 07:00:52 +0000
Manifest next update: Tue 05 Aug 2025 07:00:52 +0000
Files and hashes: 1: kWV5napb3fL1Nt2BtybPrtDmCFs.crl (hash: rWZHRWWW8L6/ndMw6DFWpb3xeuWZp4gj5qHbB6OK7pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:12:0f:b2:9c:bb:22:f5:d7:28:f9:15:98:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9165799daa5bddf2f536dd81b726cfaed0e6085b
Validity
Not Before: Aug 4 07:00:52 2025 GMT
Not After : Aug 5 07:00:52 2025 GMT
Subject: CN=0d87451b694a76e083e904f8842032aed28a5752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:7d:49:76:ff:63:a1:44:eb:23:a5:fd:3c:
06:ba:d8:1c:25:1a:96:ca:3c:fd:e3:85:c3:f1:b4:
9e:60:bc:f7:45:59:be:38:e3:79:51:1f:f5:c5:9b:
0b:c8:9a:33:f4:68:53:7f:b1:ae:3b:f7:6f:9f:95:
1e:ce:d9:74:b6:e8:d3:44:f7:12:c8:79:06:08:99:
67:54:0b:01:32:ec:d8:1e:f9:68:8d:12:cc:15:14:
81:7f:45:14:a4:d6:7c:d3:e7:3a:cf:92:b5:cb:50:
21:3b:8f:c3:a2:fc:3f:21:57:88:84:dd:13:69:14:
8f:ca:09:1d:5e:55:6b:ae:61:5a:d2:48:37:62:45:
b6:30:13:0d:3a:9d:95:7b:83:e0:ff:2e:01:20:f3:
90:ff:95:5d:58:f2:fb:91:22:66:28:61:e8:17:11:
a1:f0:ca:91:6f:38:02:1a:fc:ca:84:30:aa:8d:18:
84:50:e3:33:cf:b1:87:70:1a:07:71:f3:3e:b8:2c:
c1:2a:99:a9:8c:45:d9:49:c7:d1:b9:d6:35:ae:aa:
d6:6a:32:ac:78:ee:ab:ca:87:e4:21:d3:b9:85:e2:
01:54:59:89:ea:53:69:92:c3:85:43:09:d9:50:93:
0b:ef:95:fb:2d:e8:20:d6:34:3f:d7:fa:08:01:35:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:45:1B:69:4A:76:E0:83:E9:04:F8:84:20:32:AE:D2:8A:57:52
X509v3 Authority Key Identifier:
keyid:91:65:79:9D:AA:5B:DD:F2:F5:36:DD:81:B7:26:CF:AE:D0:E6:08:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWV5napb3fL1Nt2BtybPrtDmCFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/5a81a9-2d4d-4b26-91d1-ea17da2284ff/1/kWV5napb3fL1Nt2BtybPrtDmCFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f2:d2:ec:eb:ed:33:99:e4:ab:57:02:e2:fc:f7:45:6f:46:
4d:d9:60:75:38:a5:f8:5a:56:40:6e:1f:c3:e7:0c:22:5a:79:
8c:c6:98:61:85:ed:ae:27:e8:71:8d:7f:c7:14:31:8a:f5:3b:
24:13:19:ea:63:2b:ad:8e:24:cc:57:6d:ad:e1:4f:70:6b:0e:
b1:28:9a:c2:08:18:b8:86:8b:75:fa:92:db:85:9b:42:27:07:
04:0d:65:ea:68:40:bb:32:20:c0:dc:40:ce:cf:ea:9f:09:61:
d7:5c:fe:e7:8c:dc:e0:c3:b8:63:d0:25:e8:ff:ee:e5:07:55:
a5:d9:12:3b:06:44:1f:c4:07:33:2b:d7:19:68:11:9a:cb:b8:
2a:74:29:9d:47:02:02:0a:2e:f5:81:9e:9d:5d:82:7a:8b:91:
0c:7d:55:9a:04:bf:68:3b:95:5a:18:a3:8a:dc:ed:5a:b8:1e:
2a:fd:a6:37:5f:4d:0b:ea:9e:7e:83:f0:e6:45:15:d8:f3:53:
a1:a7:5e:66:4c:a9:8d:9e:c5:a2:6e:e5:5d:09:bb:b5:d1:b8:
f1:e7:0d:3d:78:3a:9f:ed:94:a5:cd:09:aa:d2:4f:7b:7a:4b:
35:9e:f0:6e:a7:a8:44:f0:3b:f3:ff:8e:97:33:27:f9:ec:82:
6e:5f:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:09 2025 by rpki-client