
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: qpcgkFis9H8ffVUhcAk8PQ17jrxDdt9nNu6qxuGOVIQ=
Subject key identifier: 5D:0D:06:07:04:41:6A:BC:B1:99:48:81:0C:0A:27:2E:05:24:5D:3B
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019881675C365CEA88F4497903214C28446D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:31 +0000
Manifest this update: Wed 06 Aug 2025 22:01:31 +0000
Manifest next update: Thu 07 Aug 2025 22:01:31 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: 2yulfD+Iw14n9Ded5vCavjbTouYy6ECWFoRNIhMjMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:5c:36:5c:ea:88:f4:49:79:03:21:4c:28:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Aug 6 22:01:31 2025 GMT
Not After : Aug 7 22:01:31 2025 GMT
Subject: CN=5d0d060704416abcb19948810c0a272e05245d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:01:f0:88:3e:bb:16:e0:9b:bb:ea:bc:d7:
fb:de:07:ca:c3:2e:63:a3:aa:9c:68:e9:10:23:41:
48:2c:69:e8:c7:93:ee:6d:cd:54:1c:d6:da:d2:76:
b9:64:e2:b0:70:e7:bd:e8:bf:7b:d5:2c:90:78:35:
13:ee:af:6f:d6:6d:4d:6b:bc:c6:d3:84:de:71:fd:
4f:db:72:ce:ba:93:68:b7:5e:10:32:c9:31:b5:b6:
74:92:5f:56:6b:d7:42:e9:ef:24:b8:6c:73:81:a0:
28:83:7a:37:07:95:f3:ba:1b:c5:6f:26:0a:b4:be:
7d:51:b2:19:38:83:17:c0:55:5b:49:ed:aa:30:7d:
c8:0b:a5:b2:9f:7d:a5:81:f6:9f:1c:fd:5a:d3:1f:
17:23:58:fd:f0:67:39:79:af:a8:db:31:f8:67:46:
f0:ca:3e:88:c4:fd:09:c3:9c:f7:8b:24:b7:1b:be:
a6:57:f5:bb:2b:43:c2:6c:ac:5e:39:c4:9a:75:a2:
88:a8:eb:a2:ce:18:4b:57:d8:53:28:2f:63:79:70:
d8:02:9e:c5:3a:94:11:65:7c:da:b2:d7:7a:db:d4:
da:4b:8c:bc:35:bf:60:11:b1:69:09:09:a7:3f:56:
b6:89:0f:be:d4:cc:17:eb:91:09:e6:24:d3:20:ee:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:06:07:04:41:6A:BC:B1:99:48:81:0C:0A:27:2E:05:24:5D:3B
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:82:bb:db:9c:2d:66:30:e7:9d:2e:25:57:66:de:53:e8:
ad:31:a1:8a:7a:a5:03:2b:50:d3:41:30:6e:a6:e6:89:15:80:
33:69:8e:93:f1:76:14:4f:a1:69:fc:80:ad:25:0a:c7:b1:f2:
0b:8b:0f:e6:64:40:d9:9f:ea:ea:1a:bb:c2:20:97:b1:e9:e9:
64:23:17:50:03:31:90:3c:e7:d2:06:35:ad:40:02:61:98:1a:
68:8a:a9:72:95:c2:0c:21:dc:06:34:67:bb:86:bf:a1:f8:44:
a2:3a:7c:1a:a3:e5:b1:5f:e1:7c:34:90:9c:46:f0:de:98:54:
89:ef:5c:5a:4d:04:66:73:15:23:2c:48:ed:ab:bb:ad:97:3b:
53:a7:75:80:79:bd:c6:da:e1:c2:17:48:81:a7:75:28:9b:e6:
b6:58:96:58:b6:b0:c6:b7:ba:9c:c7:62:3a:78:e9:d7:de:32:
f8:03:ed:ae:37:33:dc:2e:8d:c3:9d:a3:ba:57:4c:35:63:ba:
74:f8:f8:49:ad:eb:50:29:87:21:b7:a6:66:30:53:92:64:97:
b0:7e:8c:b0:d2:85:ca:33:4d:b5:46:43:a4:de:30:5a:ea:99:
94:11:d8:5e:05:72:81:ec:cb:0f:79:7f:f7:8b:60:8e:6b:93:
ab:18:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:11 2025 by rpki-client