Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: Z5kIxFLZRz27uWwCJPVhFA9nKHpQJkPxih5FKpAYan0=
Subject key identifier: F3:B1:AE:C7:88:C8:73:01:0A:F0:3E:E5:FB:18:A8:B4:95:24:5B:92
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 019A52D196415B64C265608E5D6907935F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 0689
Signing time: Wed 05 Nov 2025 07:00:58 +0000
Manifest this update: Wed 05 Nov 2025 07:00:58 +0000
Manifest next update: Thu 06 Nov 2025 07:00:58 +0000
Files and hashes: 1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: iANBgYAo23/nHSZs0/OyvYyNRjxM895N3Vxqk+N5Ta0=)
4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:96:41:5b:64:c2:65:60:8e:5d:69:07:93:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Nov 5 07:00:58 2025 GMT
Not After : Nov 6 07:00:58 2025 GMT
Subject: CN=f3b1aec788c873010af03ee5fb18a8b495245b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:1f:15:2a:2b:b9:bb:cf:e6:13:17:0b:a1:
b1:c5:4d:0a:39:0a:64:b4:96:72:24:3d:0d:6e:e4:
83:0d:83:9e:72:5b:4e:a4:83:c0:79:15:3f:50:b5:
b7:11:a7:f6:59:36:46:3c:a8:ab:42:72:14:7f:41:
0a:69:b5:6f:5c:53:d2:8e:9b:80:63:fe:70:c8:83:
6f:49:d1:fa:f3:61:5c:d9:51:ca:51:97:b4:9c:16:
48:ee:be:49:84:0e:4b:2e:71:c3:68:73:80:72:26:
1e:a2:83:15:1d:12:69:38:4e:47:69:41:be:d1:69:
96:f9:72:03:6a:2f:78:43:00:8b:2b:0a:07:f2:e4:
a0:90:b9:9d:64:21:5e:17:aa:96:86:6b:f6:61:07:
72:0b:f5:84:d4:91:19:16:19:03:1d:3a:01:f3:c8:
fb:bc:f9:41:93:ab:3f:6f:f1:95:4d:b4:2c:99:7d:
7f:7c:ce:db:fa:cf:82:0c:a8:aa:ac:3c:75:a1:80:
e4:f7:4b:0c:46:28:c7:aa:e1:26:6c:47:fa:2b:f0:
c6:a7:d4:aa:40:a1:d9:00:b9:63:1d:00:ac:ea:3b:
c9:2a:ee:e7:26:42:27:08:dd:7c:9c:87:98:62:23:
31:0e:b6:e1:ba:86:14:33:80:09:9f:b6:4f:0e:77:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:AE:C7:88:C8:73:01:0A:F0:3E:E5:FB:18:A8:B4:95:24:5B:92
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:40:eb:02:eb:ca:17:6f:af:f7:cb:08:70:b6:bd:30:82:56:
03:b6:8a:f4:bf:77:31:88:11:dc:b1:68:98:0c:da:8a:62:61:
7e:d3:4b:48:15:9d:03:07:fa:83:39:e5:30:df:36:82:e5:ba:
a6:bb:80:56:ff:35:ca:84:ca:77:3c:6e:2c:84:0d:1a:ce:1a:
b8:87:48:fd:53:b7:23:15:09:0f:b3:b9:5a:2a:5f:d4:66:2d:
78:e6:2a:84:ea:78:25:a2:10:61:9f:3d:91:e5:b3:c4:eb:22:
cc:f0:47:94:e4:7f:9f:30:6a:53:ca:86:54:a1:7b:d6:3f:97:
2b:cc:b7:e6:1a:4a:f3:d6:90:c5:73:9e:fb:92:53:51:45:48:
85:39:7e:b7:b7:48:50:40:1e:52:84:e5:fd:d6:c3:96:cc:78:
0e:11:dc:e8:b0:12:05:de:83:d5:6c:40:ce:ee:20:80:cd:0b:
53:39:38:6b:93:5f:34:64:23:95:c5:63:ef:d3:68:3e:ae:16:
51:9e:cf:a1:fc:ac:a0:df:fc:61:90:da:c4:69:86:a4:3e:2f:
ab:28:6d:e5:71:4e:cb:69:84:1b:9e:fe:12:75:c2:b2:dd:a9:
ba:29:5a:ae:04:da:d7:fd:44:80:d6:68:47:c5:d5:cb:5f:0e:
83:92:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:30 2025 by rpki-client