
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: MWj0ZeUle9DGJj55YnsyL60xs1grZ/+Z7NIWxs1ok8k=
Subject key identifier: 4F:EA:65:DB:C4:79:69:05:08:B9:C0:9E:17:82:82:B8:71:94:D2:69
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0198801D1CC9B316E640FDD39CDBAF34DBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0937
Signing time: Wed 06 Aug 2025 16:00:47 +0000
Manifest this update: Wed 06 Aug 2025 16:00:47 +0000
Manifest next update: Thu 07 Aug 2025 16:00:47 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: Wt5IlUD94Pg0eG178Pq927VNghYp42AROwnAr6C63LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:1c:c9:b3:16:e6:40:fd:d3:9c:db:af:34:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Aug 6 16:00:47 2025 GMT
Not After : Aug 7 16:00:47 2025 GMT
Subject: CN=4fea65dbc479690508b9c09e178282b87194d269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:76:52:b1:e1:96:13:e0:11:32:0e:30:ad:
12:b2:24:2a:8a:09:4f:20:fa:e9:09:83:d1:7e:fb:
e6:18:37:96:0c:4d:f1:5b:02:0e:0a:0a:9e:5b:5b:
15:c0:66:e2:9b:5a:5c:4e:37:1f:14:8d:39:25:60:
bd:b3:6b:f5:34:51:fc:32:20:d0:e6:6f:ac:b8:d6:
7f:f6:8c:83:68:f5:e4:d3:e6:d5:77:78:81:30:ab:
08:68:1b:82:6f:86:c7:7b:95:a5:79:20:3a:0b:cd:
91:7b:a8:d7:32:ab:07:af:0d:dc:31:88:32:c7:7a:
6e:eb:6f:4d:0a:f2:d4:4c:12:d5:11:36:bc:83:6b:
63:22:4e:39:63:b4:7c:68:dc:cb:69:26:a4:cc:f7:
80:af:0f:8f:5b:7b:64:3b:db:56:f2:5b:ee:2c:99:
1e:9c:0b:71:e2:bf:3c:f3:9c:ed:81:37:78:9c:ff:
d7:c3:8f:17:50:48:d6:1c:1a:04:bc:95:3a:11:4f:
0c:54:45:90:37:75:48:81:11:91:bf:db:67:7e:c0:
75:87:b5:4f:32:cd:64:a2:4a:09:f2:0a:65:11:92:
42:fa:f2:bf:4e:91:76:71:1b:07:da:d3:e2:d9:dd:
e0:6d:b9:5d:39:bf:aa:4e:2a:17:40:6d:d7:04:42:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:65:DB:C4:79:69:05:08:B9:C0:9E:17:82:82:B8:71:94:D2:69
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:b7:25:7d:71:62:71:93:63:68:12:1f:57:2b:fd:fe:bc:
25:19:64:fc:05:de:8a:2b:1d:bd:eb:56:0e:42:95:16:b8:c8:
c8:83:b4:f9:96:55:ab:59:0e:87:1a:a6:58:4a:c8:17:21:33:
ec:58:f9:c5:1e:c8:79:2a:4a:5f:c3:14:d6:4a:f3:e5:de:71:
d2:5c:25:d9:20:d6:4f:5c:85:7b:e3:d2:d3:f8:d1:c2:9a:f9:
fc:80:ee:26:1e:ef:1f:3d:de:2c:d4:bb:da:39:6b:d6:29:94:
a8:7f:d2:b2:16:c9:a3:a1:9e:11:91:dc:86:1e:56:ec:d9:05:
dd:82:ea:f2:b3:ce:ad:61:93:66:76:a3:71:7e:3e:0d:8a:05:
1a:0d:dd:7f:39:dd:19:b9:35:ff:9e:3a:c1:49:af:f9:dd:50:
4c:2b:dc:88:37:ed:31:94:ab:b8:46:ec:c1:dc:6a:ec:20:b0:
c0:8f:6d:98:a4:eb:c2:b0:36:28:14:3e:a2:9e:c7:49:dc:b5:
b1:d8:75:17:92:dd:2b:eb:75:5d:82:08:c6:7e:0b:76:0b:86:
ae:13:59:5d:d6:60:c7:a9:db:72:d3:ec:97:1c:3f:6b:bc:de:
5c:7f:6f:c2:0f:76:90:e1:54:e4:88:f4:e5:0b:77:e9:5e:86:
b3:9d:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:31 2025 by rpki-client