Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: GJWc/RHDXZHiMVV1SJbx0za31JYInCZEbj/u2MEA1DY=
Subject key identifier: 23:36:CF:82:13:D8:9D:18:B2:05:CB:CE:BF:6E:3E:D6:6B:21:EF:85
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01988D3426721DEFB13167DE1FD11792B60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 11E7
Signing time: Sat 09 Aug 2025 05:01:01 +0000
Manifest this update: Sat 09 Aug 2025 05:01:01 +0000
Manifest next update: Sun 10 Aug 2025 05:01:01 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: +fA+/tLbvl4pEHRIM5BsV5xSVIrpXQQh4wTw3Gfsn+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:26:72:1d:ef:b1:31:67:de:1f:d1:17:92:b6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Aug 9 05:01:01 2025 GMT
Not After : Aug 10 05:01:01 2025 GMT
Subject: CN=2336cf8213d89d18b205cbcebf6e3ed66b21ef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:b0:a5:60:3b:85:f6:80:f7:d5:cf:07:38:
a9:1a:f9:96:d8:c1:5f:ba:60:f3:89:5a:39:f7:fd:
28:5a:c4:b5:e8:c9:a2:29:45:96:6d:ec:ea:8e:d4:
31:b9:b5:2c:74:af:92:c2:f2:dd:74:4e:a9:79:18:
8f:8b:7f:58:1f:48:32:f8:0e:92:06:86:07:f2:69:
2f:a3:99:85:07:7d:60:c3:05:f3:06:52:2e:17:69:
9b:57:5a:db:49:76:e4:23:9a:4b:1d:b1:48:0f:c4:
a6:1a:e0:1a:96:f8:4d:a0:1a:46:d7:5c:7c:7d:c6:
b3:bf:fd:82:9b:0e:76:e8:50:af:0e:88:1c:93:75:
46:a9:3c:20:f5:24:b6:e1:55:f9:73:65:8c:cf:0f:
db:a9:a5:77:89:26:f5:13:53:e6:be:3c:53:66:f8:
8b:6b:77:9d:1d:ca:9c:56:64:86:7a:a5:79:23:11:
87:08:af:88:f8:d5:c3:ab:63:73:27:bc:72:30:94:
09:69:57:d1:ff:30:e8:7b:68:74:d6:b0:fd:ee:50:
36:3d:ee:5c:ac:90:ba:86:00:95:ea:e9:61:d8:8f:
5f:56:71:e6:b2:18:e2:53:42:0e:d9:92:00:04:d6:
87:80:fe:68:38:46:cf:0c:7a:5b:cb:43:02:b1:2f:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:CF:82:13:D8:9D:18:B2:05:CB:CE:BF:6E:3E:D6:6B:21:EF:85
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:c1:eb:ed:dc:72:0e:f2:f7:a8:5e:75:78:86:3f:6f:49:
9f:37:50:26:4f:91:ec:6f:f9:a4:4a:35:c1:01:98:5d:5f:bc:
d6:3c:42:03:93:ac:61:53:61:f3:1d:ba:4b:b0:56:41:e9:05:
29:4a:44:c2:dc:f0:81:9c:07:19:79:4b:b1:c0:49:e1:6d:d7:
23:24:00:87:7e:b0:65:4e:fc:3b:f9:64:f4:e4:77:34:e9:91:
48:51:34:4d:80:4e:8c:dc:e1:bc:5d:c0:d0:a6:26:8a:23:1d:
52:98:ca:5d:83:dc:01:da:06:9d:89:f1:7b:47:dd:d8:ff:34:
f8:ca:74:de:71:eb:69:99:1c:7a:8d:99:46:4e:06:40:b0:f5:
c1:61:40:d3:92:71:a8:71:31:0c:75:4a:91:d7:80:c6:6f:d4:
69:7e:74:08:7f:f5:fa:7f:e8:10:18:05:17:f5:92:8f:c8:69:
e7:4a:60:30:e5:30:99:ae:b1:0e:c3:55:13:5f:3f:fb:3a:46:
aa:3a:e8:92:f9:d7:d0:67:9a:7b:f0:b9:41:a5:7d:35:25:31:
d8:80:04:e0:47:ce:7e:f8:78:c0:d7:79:03:a6:56:6d:66:d6:
3d:3f:6e:8f:f3:3f:e6:a6:77:2d:b6:bf:09:fd:d7:82:85:05:
aa:8b:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:37 2025 by rpki-client