Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft
File: kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft (raw, json)
Hash identifier: oTjiEcQGRjpA0UyC9N4ge6mE+LQiiFzq6xF8A/vKtQw=
Subject key identifier: 46:3F:5D:86:21:C5:A7:23:9E:CC:DE:41:56:07:FA:3D:4D:0D:24:2B
Authority key identifier: 91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8
Certificate issuer: /CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
Certificate serial: 01987E2EB9234892C5596D5C6A388119421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft
Manifest number: 0143
Signing time: Wed 06 Aug 2025 07:00:47 +0000
Manifest this update: Wed 06 Aug 2025 07:00:47 +0000
Manifest next update: Thu 07 Aug 2025 07:00:47 +0000
Files and hashes: 1: kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl (hash: kml6ndilHvJkD1h8FcmUQKqZ1npAEBi3zgSBVkRBtc8=)
2: t_GXvizzbbtQwSd_rqjoEMAWE2Y.roa (hash: ZkiqsfUq4HUiMQwjqugEWSy9vPbelZw6D7VGclM/F3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:b9:23:48:92:c5:59:6d:5c:6a:38:81:19:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
Validity
Not Before: Aug 6 07:00:47 2025 GMT
Not After : Aug 7 07:00:47 2025 GMT
Subject: CN=463f5d8621c5a7239eccde415607fa3d4d0d242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:c9:21:68:e8:0f:13:3b:da:58:b6:3e:2f:
97:14:34:f3:28:09:9e:a9:a8:7b:4f:02:d2:34:bf:
b6:c9:39:5d:e4:c4:62:1d:70:11:30:d4:4d:9b:04:
61:d1:ac:a3:2c:56:8a:e0:91:2d:5a:05:39:21:2c:
70:58:c1:c1:da:2c:6e:69:9f:c8:6e:07:92:d5:bf:
6d:61:1e:17:02:8f:90:14:fe:a1:a3:97:9c:2f:45:
0a:81:ad:f6:b6:14:09:b1:0a:86:c1:79:0a:ba:00:
8b:55:7b:a0:e0:2b:c6:e9:98:28:1f:e9:f4:ea:20:
00:22:63:1d:5a:59:fc:56:18:91:98:83:0e:82:11:
9a:cf:69:dc:7f:44:60:3d:2c:b3:3d:0b:9f:9f:a0:
f2:06:07:12:3f:96:fe:c5:bd:93:b0:af:15:74:3d:
bc:5d:7a:26:12:c8:ef:15:56:c1:00:cd:b3:60:45:
54:dc:18:79:29:52:ec:79:7d:50:e4:0f:a0:e7:0d:
f2:3a:e0:56:3c:ff:17:aa:40:64:1f:35:ef:6c:ae:
fb:c9:46:60:9e:66:b5:a1:e3:87:6a:66:df:32:84:
35:9e:55:57:3b:b1:6d:9d:9c:1b:95:d6:ef:f7:b7:
ab:d4:6a:f1:45:fa:f0:b4:89:33:30:c3:97:6a:2d:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:5D:86:21:C5:A7:23:9E:CC:DE:41:56:07:FA:3D:4D:0D:24:2B
X509v3 Authority Key Identifier:
keyid:91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:16:03:12:d6:ff:eb:71:05:c3:6e:70:1f:d0:f3:2a:a1:
60:49:f1:5c:44:5a:9a:15:0d:4b:48:8f:10:7a:0d:b2:aa:b6:
8f:2d:4a:10:85:54:cb:be:d8:9b:58:7d:b0:28:8b:1e:37:09:
e1:11:fd:33:57:de:92:83:5f:ed:0c:33:1d:48:72:17:6b:96:
93:4c:bd:3a:6f:76:6d:d0:4f:09:c4:03:9b:bb:df:4d:c0:a3:
89:fd:7a:fb:de:e0:08:e1:0f:80:7f:e7:33:5d:bf:e3:e1:4e:
63:47:fe:d3:d3:dc:fa:c3:14:3f:dc:eb:3f:33:53:ca:a0:86:
cf:b2:09:e6:f5:3a:f2:e0:d7:8d:5b:a4:58:5c:49:3e:fe:66:
b2:df:22:25:18:ab:bd:5b:7b:f5:2d:2e:be:b1:ee:87:69:a1:
19:0a:e2:45:ef:5c:b0:6c:b0:58:61:6b:07:91:e4:8f:89:c4:
9c:ec:03:ea:4f:42:88:b2:fa:5e:49:8b:5c:42:e1:02:9c:9c:
37:9d:8d:8e:b5:79:49:49:aa:ae:18:44:62:f5:2f:35:bb:ec:
f6:83:94:48:cd:6f:a4:2a:ad:d2:59:04:5c:b9:55:85:45:11:
b9:55:01:f8:28:f7:61:ff:7a:c6:f6:85:4a:09:59:0e:a7:eb:
b0:e9:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:08 2025 by rpki-client