Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: Y6btrHpnn0VLBoNt/qqIkqdzxqLNQ+pLWfow4TfRSrg=
Subject key identifier: 79:F7:D8:98:E9:1E:F4:B4:0B:45:DD:93:B3:7C:F1:BE:E4:CB:E5:89
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 0198D65F25C6732C8EF03943D7FA5B90D29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0D65
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: mWdopS4hjuLVAlfGIx0dnEb+gkZsTPSPu6/Wf4sYCp0=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:25:c6:73:2c:8e:f0:39:43:d7:fa:5b:90:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=79f7d898e91ef4b40b45dd93b37cf1bee4cbe589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:8e:13:ed:f7:92:15:46:c5:3d:b7:84:e0:
83:9a:6c:b3:58:82:fb:d4:6e:b5:0a:b8:e8:ca:2f:
36:a1:76:e3:07:30:25:58:19:3c:32:be:b7:e1:b5:
3b:3e:ea:f6:e2:ba:67:34:75:c7:b5:b8:bd:79:1b:
71:df:a0:19:49:08:ae:97:dd:d3:fc:39:a2:9a:5d:
ec:c2:bd:86:fc:fe:a3:37:ba:f8:7d:a6:8f:63:27:
52:95:1d:40:44:ea:01:73:c0:c9:21:1d:bc:b8:f6:
46:56:95:33:e4:07:d6:4d:b8:48:34:43:7b:21:d0:
28:7e:35:99:0f:1e:6e:05:86:cc:a1:5c:28:ba:64:
08:8a:a7:9c:a6:fc:e9:83:61:f5:0c:d5:67:30:cc:
ec:d0:18:b7:b5:a0:1c:03:f6:8f:09:4c:a6:14:a4:
2c:3c:cb:53:5a:3f:0e:4e:39:d3:b1:2d:42:2f:df:
3c:30:b4:2f:44:48:7d:ad:79:80:63:28:15:a0:71:
07:43:93:d2:21:69:c2:44:ec:8e:22:8f:16:96:54:
1a:24:cb:f8:1c:ea:27:f6:fa:7b:72:82:de:05:2c:
cc:4c:5a:b6:62:07:8d:17:b3:4d:2d:38:87:0b:9d:
03:6b:c8:6d:c0:d7:f9:49:9b:84:3e:9c:1b:fe:21:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:D8:98:E9:1E:F4:B4:0B:45:DD:93:B3:7C:F1:BE:E4:CB:E5:89
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:52:ef:66:b4:46:47:c8:94:a5:0c:4a:d5:aa:d1:34:1b:00:
d0:0a:29:7d:98:ca:0c:c7:da:8e:91:aa:7e:fd:19:36:fa:f5:
26:ee:bf:2b:ca:3d:d8:b4:0e:6a:1d:15:31:15:0a:d2:5a:3b:
31:e5:38:06:3c:a3:9b:b8:15:97:ac:11:cb:26:b9:af:24:16:
b0:e6:3e:54:9a:6d:65:f4:51:4e:3d:d8:d5:a3:4b:da:e1:ff:
24:bf:cc:57:76:05:6d:46:29:90:6a:84:67:50:2a:da:80:0c:
5d:95:4a:da:10:5f:60:ae:34:af:dc:39:af:c4:35:27:90:b2:
9d:88:94:c3:b7:cf:6d:ba:41:af:26:07:e9:05:7e:03:af:58:
93:b3:ad:27:62:41:ed:7d:5a:9a:e5:5a:ba:4b:13:23:06:58:
d8:49:21:e4:fd:1b:76:54:d3:fe:84:b8:a7:e8:c3:be:64:22:
27:0e:9d:45:ea:90:ab:21:39:25:e7:99:32:65:35:83:e9:f2:
f3:4f:8c:45:78:e8:75:c5:ae:6a:63:21:f6:10:6b:fd:59:d9:
41:2d:e2:1f:7c:14:b9:30:8d:ac:33:cf:42:9d:01:a1:bb:38:
3e:ca:b9:77:1a:0b:ec:4f:cf:a9:5d:97:df:c7:3f:33:78:8e:
11:86:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:39 2025 by rpki-client