Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: sp5Hj9KvA7fiq10EeuBF7BrcK+nnxc+nQqfvIwfEp0A=
Subject key identifier: A9:4A:90:3E:A6:7D:4C:92:13:93:21:20:BB:CB:A7:4A:02:42:D7:D1
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0198849F07EE2B547F15EF8F460FA6CB1634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 0958
Signing time: Thu 07 Aug 2025 13:01:11 +0000
Manifest this update: Thu 07 Aug 2025 13:01:11 +0000
Manifest next update: Fri 08 Aug 2025 13:01:11 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: o6lectZ+mEfBeE+A/2zYmHNyemWXxYpRluoR9sgu7YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9f:07:ee:2b:54:7f:15:ef:8f:46:0f:a6:cb:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Aug 7 13:01:11 2025 GMT
Not After : Aug 8 13:01:11 2025 GMT
Subject: CN=a94a903ea67d4c9213932120bbcba74a0242d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:40:2c:f1:92:b7:8d:74:73:38:0a:a1:1d:
44:87:0f:91:81:ed:c7:44:bf:60:2b:d8:8e:e5:5a:
04:f5:be:60:28:5a:f9:9b:3d:6b:77:c8:b4:81:5f:
09:03:97:da:b9:c8:53:15:91:94:00:e8:67:e2:f1:
bd:67:cc:0c:5a:bb:9a:cd:a7:ba:75:c8:11:01:05:
ed:ec:32:51:1e:4f:2b:02:0c:1c:0b:e2:f3:70:d1:
da:2c:e4:4e:26:fc:67:01:2d:d9:88:07:da:c2:5d:
01:a7:b3:a6:c5:89:a8:68:10:fc:c6:77:bf:db:50:
42:91:33:2b:dd:0d:ac:40:09:a7:8e:86:5d:a2:4d:
ba:38:4f:e9:b1:0f:31:b6:15:2a:0d:f1:0e:31:5f:
ae:ee:6d:81:e9:9f:c7:62:b7:0e:50:16:f5:5f:18:
21:a2:cd:78:71:1a:a8:be:48:9b:22:a6:ac:c1:3a:
73:5b:75:b9:ae:4f:1e:3d:f3:b3:d8:2f:b1:67:43:
b6:d9:d0:ba:b0:fa:6c:f4:6d:52:6d:43:13:cc:d8:
34:ae:56:f8:8e:62:5d:c3:3c:bd:56:09:70:b6:b9:
c2:80:df:06:c0:2d:14:dd:69:2a:76:d9:b6:c0:4f:
23:99:1c:d4:76:34:2b:4f:16:22:e8:24:d5:09:30:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:90:3E:A6:7D:4C:92:13:93:21:20:BB:CB:A7:4A:02:42:D7:D1
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5f:94:7c:fd:51:40:07:fa:43:56:76:01:c0:c2:7b:59:f8:
ea:f2:6e:2c:3c:f1:82:d1:89:74:29:7a:80:a3:56:d5:9b:d5:
ea:ed:8d:c2:80:0e:53:72:4e:3b:ee:75:d0:72:56:2d:13:8a:
d9:d7:51:28:77:56:b8:a1:86:d1:f7:42:83:36:d7:34:f0:eb:
e2:b4:81:11:c4:02:7b:7b:14:bd:ca:f7:be:a7:9a:a5:96:1f:
9d:bd:bb:77:9a:d6:73:d1:5f:9e:78:88:a6:fd:d6:a8:ee:82:
b6:bb:a4:51:f0:63:4a:f5:04:35:12:1b:e4:05:be:5c:fb:40:
09:72:1c:e2:e0:20:2b:37:0c:20:88:67:a3:7a:94:67:d9:d8:
21:e3:d5:89:8a:d6:97:c1:69:fd:b6:5c:d3:38:78:13:66:30:
54:23:e8:fa:0c:a3:51:7b:74:e4:e6:00:bf:03:00:45:16:d4:
24:84:7c:ef:1f:83:99:51:ee:0b:6b:ce:64:89:8c:e1:2c:21:
ea:b7:a9:06:5d:5a:6e:f4:44:16:d7:34:a7:40:a0:93:d0:0e:
77:30:db:1c:40:a8:6d:8b:2f:c6:2b:3e:de:f2:24:b0:12:1c:
a5:64:b4:f9:00:29:f3:7d:f8:55:70:df:85:f4:e7:6c:07:ac:
a8:00:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:57 2025 by rpki-client