Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: O3Xk9huKval3n6BpQlxvtDdcxu+M4x5GpoUNckvhfTo=
Subject key identifier: 4F:14:4E:D9:1A:BA:28:A5:E4:40:E3:9F:E4:9A:B1:94:34:AB:A1:84
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 01987298F5C1157683E7E2A630557067C497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 02DC
Signing time: Mon 04 Aug 2025 01:01:23 +0000
Manifest this update: Mon 04 Aug 2025 01:01:23 +0000
Manifest next update: Tue 05 Aug 2025 01:01:23 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: qGEr4QSqpk1ffSOd1RbIWHaIy18t+VhMGZbj4G0FgZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f5:c1:15:76:83:e7:e2:a6:30:55:70:67:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Aug 4 01:01:23 2025 GMT
Not After : Aug 5 01:01:23 2025 GMT
Subject: CN=4f144ed91aba28a5e440e39fe49ab19434aba184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:54:3c:43:51:e5:8f:4a:43:3b:b6:a7:42:
db:16:c6:a0:48:69:b1:d5:a7:f7:b2:5a:fb:fc:28:
53:3b:52:2a:6f:85:7b:fd:37:31:fa:b2:2b:3d:01:
5a:91:f1:72:e0:3a:49:e4:28:2e:66:64:53:37:a9:
bc:a4:76:f3:7f:63:c9:ae:d6:30:a6:cc:8a:d1:c0:
c6:3f:86:b8:0a:54:30:83:ed:d6:26:e0:f4:86:4f:
66:cb:67:fd:4a:cc:4b:ba:13:1c:8f:f3:52:20:f7:
5d:2c:f9:53:fd:35:54:4e:41:5f:1b:d7:e5:cb:18:
2c:e3:49:b9:62:95:13:60:5a:76:0a:b1:d4:c8:c9:
7e:15:9e:ee:eb:c4:16:5e:da:8c:0a:23:aa:17:e5:
51:c9:4b:ec:e9:ce:fa:86:04:fa:72:8a:38:af:7d:
aa:10:60:8c:e1:e6:60:c7:0e:02:07:cf:4d:1f:e6:
78:45:9b:f1:ea:e3:eb:95:4f:d9:02:11:a6:2f:96:
25:da:be:bf:0d:c2:70:94:71:88:ff:0a:df:e7:25:
54:33:a2:c0:43:f0:91:70:38:af:53:cb:af:d9:06:
c5:29:9f:4b:d7:95:ac:f6:9e:a8:62:6b:93:29:87:
3e:e5:a3:9c:4b:1e:23:de:3e:b8:9d:95:65:1f:17:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:4E:D9:1A:BA:28:A5:E4:40:E3:9F:E4:9A:B1:94:34:AB:A1:84
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c9:1c:d6:a5:f2:cb:03:37:a5:90:e8:e1:a3:a1:e4:47:e1:
aa:87:e5:4b:bd:4d:a8:e9:60:04:04:ee:d0:ff:21:99:dc:45:
5d:dd:1b:22:bb:b2:83:a7:03:0f:d7:9c:e8:5b:e0:b7:98:c3:
ea:b6:81:0f:62:fb:11:9b:16:29:1f:7f:3f:bb:c6:0d:16:ab:
b2:f3:9c:26:6c:39:c4:1e:ba:58:21:85:f0:d6:8d:e4:c0:a1:
f9:4b:4e:b3:f4:60:77:60:97:c5:23:1a:10:18:1e:82:71:5e:
1f:44:e2:78:f5:94:60:6a:b3:84:b1:70:70:47:f1:50:9d:74:
ec:7e:0e:e9:88:f5:d7:5c:6c:9b:af:c0:80:0a:43:96:a8:6d:
96:d4:89:cd:45:95:83:4d:0e:ae:68:93:fd:79:c6:36:35:cd:
ea:18:91:2b:9c:a9:c5:6e:24:18:3f:2e:f3:c5:db:0f:84:41:
b5:3c:0f:ba:c4:26:19:7a:45:b3:ca:46:17:36:5c:6d:f9:dc:
c3:81:ef:50:6c:69:79:48:eb:8c:c0:e9:5e:05:ef:b9:b9:40:
11:6c:05:a2:da:2f:5f:e7:de:10:f2:da:e4:e0:9f:6b:c1:09:
91:40:7d:2e:22:67:63:09:12:eb:4b:0a:b7:47:ee:7e:9a:49:
09:9e:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:10 2025 by rpki-client