Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: vdQ+5HlnBcuAEbzmMMZm8OWwac2H+vLZTIo3dMcLUd4=
Subject key identifier: 40:C1:8E:0F:33:AA:8B:D2:FD:93:29:30:06:83:44:C9:5A:C0:0B:2E
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 0198D629902EB1D59F36C9CC5B802375E1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 08B3
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: zFGKSrpD2oTwPs11Qe3AbvhAttua3F9FAfZsQktfiRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:90:2e:b1:d5:9f:36:c9:cc:5b:80:23:75:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=40c18e0f33aa8bd2fd932930068344c95ac00b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:0f:72:81:ec:f2:74:5e:bd:23:2f:b4:bf:
2b:ba:dd:7a:07:57:14:05:5c:e5:42:28:99:58:dd:
d1:7a:0d:84:dd:68:0f:3e:b9:45:ce:64:35:19:b9:
74:14:be:a6:b5:60:a2:9e:69:59:be:fc:04:27:ea:
3c:dd:7a:00:ab:9e:aa:8c:17:87:00:58:79:e7:24:
1a:9e:e6:64:df:7d:fa:6e:c0:c0:79:8c:7b:04:19:
59:9c:32:9b:98:49:4c:b0:da:02:a7:36:a9:3b:b5:
b5:5a:fe:0a:d4:cb:b6:70:55:5f:89:22:0a:eb:e7:
fc:ec:26:a3:d2:94:98:f5:4d:93:32:e0:f8:20:6a:
3c:e3:72:bb:2f:31:6b:b7:c7:33:9c:63:bd:22:05:
11:d4:64:d1:ca:d6:ba:13:75:c8:1a:e6:aa:e4:3e:
69:2c:66:1c:bf:f1:56:c7:bf:2d:03:19:ab:36:70:
07:02:5a:64:10:30:b1:14:da:70:24:af:db:74:3d:
b9:32:82:7a:ac:20:c4:3e:77:c3:99:a2:04:69:90:
b8:08:01:97:5f:ed:69:d6:11:04:47:dc:29:dc:82:
da:a9:41:46:e1:fa:ba:83:7f:4a:bc:68:c3:fc:1f:
1d:48:a9:39:c4:06:c7:1f:cd:bc:8a:60:3e:18:1f:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C1:8E:0F:33:AA:8B:D2:FD:93:29:30:06:83:44:C9:5A:C0:0B:2E
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:db:30:10:63:e8:e8:03:e1:8b:a5:32:26:5c:59:9b:21:
dc:22:71:c9:ff:3a:81:f5:f2:6d:81:46:27:c1:98:ab:ce:0c:
e8:ba:80:7c:af:7c:af:52:73:ef:6b:32:b4:d9:55:96:6d:7f:
9c:10:d3:29:cb:b3:08:b8:b8:86:b6:d8:75:97:5e:24:9c:4c:
2b:7a:8a:e4:05:97:96:e3:e7:7a:bd:d8:96:3d:4b:d5:3e:15:
d1:86:1f:03:98:d5:e7:2d:32:73:ae:6e:5a:e2:95:82:46:1b:
d6:f2:f6:3c:45:c7:95:0a:42:4a:5a:d1:f7:09:ce:d5:9c:f6:
4d:28:48:56:ff:72:f2:bd:b5:88:3b:c4:94:8c:f8:4e:f3:e1:
ab:6e:4c:87:79:ee:26:2a:0d:e4:d6:70:ab:de:23:b2:54:46:
bb:07:f5:fb:df:80:4e:63:94:cf:75:a9:2a:cb:4a:82:ff:24:
ce:ea:35:48:38:11:f9:ca:86:61:b1:67:a1:53:fe:f3:fb:17:
8b:54:66:80:5f:f0:c4:b8:6c:a2:4d:f7:e1:a6:6a:dc:4b:2b:
7f:0a:70:37:bd:c1:3e:f5:1a:0b:b2:41:99:5b:e1:f5:09:3e:
84:86:df:f0:b5:59:dc:cf:7f:64:9f:28:8c:af:ab:75:82:32:
0e:a1:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:06 2025 by rpki-client