Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: yb9rBC/zZkHkS51QUqAM7u4nbHgRp4eKvfhGje/JXuk=
Subject key identifier: 67:44:66:32:5B:47:19:26:7F:B9:57:6D:64:9F:75:5B:18:08:D3:A0
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 01989ECD47CA709BA2C44265B2F0C85C67AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 15:01:49 +0000
Manifest this update: Tue 12 Aug 2025 15:01:49 +0000
Manifest next update: Wed 13 Aug 2025 15:01:49 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: RHcVNnDwW+pmUOoQTTDHaGoi4X5LUSOUMp/oqEiELIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:47:ca:70:9b:a2:c4:42:65:b2:f0:c8:5c:67:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Aug 12 15:01:49 2025 GMT
Not After : Aug 13 15:01:49 2025 GMT
Subject: CN=674466325b4719267fb9576d649f755b1808d3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:bc:49:8c:d5:1e:bd:41:33:a0:31:15:73:
31:7b:a5:0e:50:fe:7e:61:96:43:d5:ca:f5:15:2f:
1e:51:ee:e4:4f:ed:f1:75:04:ed:dd:d5:c7:af:34:
f9:1d:00:ab:0d:c5:5f:25:ae:7f:13:ef:c2:ba:df:
6b:e3:09:d0:e8:d8:a2:e4:74:6b:5d:a1:7f:87:48:
a8:84:f7:aa:58:bc:23:13:e8:39:83:91:04:33:44:
9d:61:dc:e7:95:03:31:7f:41:21:c4:3f:6e:44:95:
34:1d:69:9a:c9:fe:e4:e9:47:1a:a2:37:d4:02:b8:
3c:ef:a6:b2:48:7d:65:89:35:4e:cd:2b:eb:f4:63:
38:79:42:0b:6d:f4:26:fb:c0:4c:df:db:cc:60:96:
7f:4d:f4:d0:83:3e:76:83:ca:76:5a:fb:64:6f:80:
05:fc:4c:79:17:fd:14:1e:9b:2c:92:c4:d4:27:07:
20:12:7e:ce:53:03:56:b1:a8:4b:d7:de:ff:65:0b:
cb:ba:db:0e:a8:53:a5:bb:03:39:3f:3f:b5:b8:fa:
5b:28:ba:f0:78:2d:07:3a:a8:c6:62:37:ee:d7:fc:
b0:f2:24:16:4c:cf:7e:8c:15:67:60:1d:76:30:05:
b4:9b:1a:47:51:ae:30:93:bc:c5:f1:aa:45:ed:10:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:66:32:5B:47:19:26:7F:B9:57:6D:64:9F:75:5B:18:08:D3:A0
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a1:97:2c:05:65:1a:62:72:7e:1d:70:28:79:ab:fb:f3:c8:
68:7e:bb:b2:9d:37:0c:51:bc:8c:c8:73:c7:49:01:1a:0e:53:
a2:e7:77:4b:17:e4:20:2f:59:44:29:2e:d4:cd:8b:df:c4:94:
5d:75:cd:8a:0e:e2:d3:73:45:c0:ef:3b:53:ee:06:d7:17:99:
16:4d:b3:a5:14:0c:1b:54:ca:2a:dc:d9:fd:ab:25:b9:56:1a:
6a:86:49:f5:8a:bc:e7:30:65:40:f9:20:8c:fe:9a:d7:52:d6:
93:41:05:d2:3a:e8:e6:de:e6:51:bc:4c:f5:75:a2:a6:11:99:
5b:89:7c:00:15:83:11:9d:80:3b:4d:bc:2f:d4:1d:30:3a:b5:
c9:b1:f0:d6:1c:52:b9:b8:32:5e:23:55:32:71:1a:1f:00:0c:
3f:71:68:49:e2:61:34:82:82:0b:1c:f2:cc:16:f6:8a:dc:c7:
97:88:77:d0:53:ee:00:64:98:aa:9c:b5:1f:df:88:9c:e5:98:
bc:59:f8:3c:ad:1f:f0:0d:1a:79:48:2b:69:12:57:18:fa:d1:
c7:b8:c1:79:73:4b:c2:82:49:ff:8b:5f:a1:bc:aa:ed:62:11:
e4:10:d6:94:24:3b:4b:0c:a4:20:9b:fa:f8:b6:5b:fa:4c:a8:
df:62:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:34 2025 by rpki-client