Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: kUUo5LNjx/ckhvD65o8U25f+ARdGk4Z2h2BNO+GgtQU=
Subject key identifier: 52:60:40:4E:B9:D6:DE:D9:2D:CB:57:98:D8:71:C9:67:A9:6F:F2:36
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 019873E2E95A8C99A0DE3DB37AD47DB80958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 0591
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: 9sGqyQJDT278saLqBmWSKGpGcbN5jYQlge5EJBupeVE=)
4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e9:5a:8c:99:a0:de:3d:b3:7a:d4:7d:b8:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=5260404eb9d6ded92dcb5798d871c967a96ff236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:10:0b:24:e4:9e:3a:66:7a:8f:c0:84:9d:
c0:2a:c1:df:11:43:8c:3b:79:8a:cf:ff:b8:45:d7:
fe:5f:cc:6b:57:b5:28:47:1f:ce:b5:9a:8f:44:57:
70:92:97:ef:9a:b7:73:a4:4d:2d:20:c5:cf:8d:a2:
e5:6c:28:df:a1:6f:0b:c5:9f:52:b7:62:c6:be:2d:
f4:07:09:f8:0a:3e:0f:f1:93:eb:6c:58:87:7c:7c:
13:ac:61:f0:81:76:37:50:50:fb:41:31:41:ef:4e:
b2:05:25:a0:b2:9c:70:6c:a3:cc:17:3f:b1:c6:17:
d4:55:dd:91:65:f3:ff:9f:fb:54:7a:9e:2c:0e:e0:
35:42:48:47:7b:d7:00:f4:e4:42:07:59:78:33:0b:
66:3c:55:e1:b8:c9:0d:a9:c1:5f:41:c3:e5:8b:65:
4e:6b:5a:e4:01:c5:b8:3e:f6:fc:3c:ad:d1:e9:05:
cd:40:50:7e:09:82:b9:87:6c:a6:46:03:5d:fc:13:
23:1a:dd:e3:2c:0e:e7:f3:1f:78:26:0a:3a:bc:a3:
f3:b2:44:be:3b:fb:37:d5:64:7b:68:80:de:08:4e:
b7:2c:3c:6a:49:3c:d5:49:23:5c:46:72:fd:85:ba:
54:cc:81:cf:4d:0f:9a:e7:de:00:54:94:5a:a1:de:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:40:4E:B9:D6:DE:D9:2D:CB:57:98:D8:71:C9:67:A9:6F:F2:36
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:d5:af:50:10:e6:d9:b0:f1:c6:80:65:24:df:a4:73:fb:
8a:2b:df:52:b9:be:dc:4d:bd:ef:60:e7:a8:a0:f1:a6:23:74:
7a:78:a2:4d:2d:ca:88:2c:81:e8:1f:50:df:7c:46:e9:c6:18:
b2:8c:08:61:89:d4:52:ef:23:4d:d4:af:43:58:8f:d9:5c:5b:
6b:fd:85:ad:c4:99:99:bd:c4:4e:45:ec:0a:2e:a2:9d:5e:b7:
ad:de:36:df:63:64:62:97:c9:3c:bd:d2:cd:b9:4d:88:c7:15:
86:0b:7f:8e:4d:b0:e2:cb:ef:4f:41:9a:a0:81:d2:7c:7f:c6:
8c:62:f9:0c:72:d9:45:df:cd:bb:24:44:42:b6:b8:1a:6b:4e:
b2:14:78:11:c3:4b:7b:aa:9c:4d:c8:54:bc:e9:12:c8:db:cf:
64:53:be:5e:bd:5b:52:41:a8:ca:f8:f4:44:0e:78:c1:d0:39:
ee:ee:04:34:41:f7:a8:b7:83:96:69:e4:f3:dd:a6:4d:39:7e:
cf:88:3e:5b:08:37:f0:2e:48:f7:4c:40:64:a3:42:0a:b0:60:
9f:2e:62:77:90:5e:d3:8e:1c:f8:04:ef:37:61:5d:79:b9:b8:
b0:87:d2:65:ea:89:95:e8:fe:78:4f:ed:25:0e:7c:35:24:4f:
7f:d2:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:27 2025 by rpki-client