Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: wmuVq9SA9GnTJxbZFrLdR6yfLLP2qc0FZ3houodsj58=
Subject key identifier: 47:B7:A8:B3:7D:4F:1B:43:39:E2:77:6A:1B:16:E8:37:9F:4A:AE:CB
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 0198D54E7B5EFC6EAB31D2625FC6716DFC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 1389
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: RvUMAOGVEoxMeaaFXUJfh1Hycdub2g/sjvzy8H5gJcA=)
4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7b:5e:fc:6e:ab:31:d2:62:5f:c6:71:6d:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=47b7a8b37d4f1b4339e2776a1b16e8379f4aaecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:49:83:60:86:84:e0:c7:4e:43:47:d7:fc:
7d:67:3b:f8:98:a2:aa:f4:4d:b8:2e:79:ce:3e:4a:
38:47:a8:b2:6b:82:f2:44:1f:e9:02:a3:51:7a:c3:
04:98:b6:d1:7b:dc:40:0b:67:13:6e:18:9f:5e:96:
44:ee:5b:6a:a9:23:89:fd:6c:95:9b:ef:01:9c:be:
28:57:d2:ac:3d:cb:88:4a:29:b8:64:7f:fd:af:28:
a3:5c:63:2e:bd:ec:bd:e2:16:de:8c:a8:d4:6c:1f:
8c:77:7f:52:5e:a1:b4:99:04:03:58:aa:ae:f3:dd:
2d:7a:d1:24:d1:54:63:18:7e:e3:73:ea:e1:58:97:
fd:61:aa:bd:9f:04:b3:42:4e:34:2e:2f:da:5c:53:
c0:34:ba:af:46:3e:e7:6c:23:7d:32:13:c1:4d:1d:
56:b6:60:ac:9e:79:9f:af:88:6e:b7:6a:b1:cf:e4:
a3:16:35:bd:cc:3f:e8:dd:2f:b7:31:a7:c5:43:91:
e8:ef:04:58:6a:3e:29:0a:c8:d5:37:f2:c8:71:ba:
56:b2:03:a2:ac:da:09:62:7b:f6:05:a6:35:75:99:
f5:d1:7b:c1:6d:b2:6f:44:35:0f:dc:2b:8e:54:f6:
73:e8:de:08:25:d9:c2:db:3e:58:c3:e1:27:14:3e:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B7:A8:B3:7D:4F:1B:43:39:E2:77:6A:1B:16:E8:37:9F:4A:AE:CB
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4f:ed:53:6f:9e:ff:38:44:6e:d5:7e:8f:a0:64:b0:6c:3a:
eb:1e:f2:43:31:d7:e6:a5:1d:5f:bb:63:53:52:31:2d:8c:ed:
0d:ed:f1:df:49:67:7d:5c:3a:7b:e5:26:75:ba:f9:88:2d:0a:
d6:56:3a:e6:3d:49:36:70:8d:de:4b:bf:16:57:c0:7a:54:e4:
1d:f7:d9:10:53:90:fc:7e:12:b1:29:f3:df:15:05:b7:9c:33:
0f:f1:47:f7:bc:a6:cc:2d:3f:2d:08:cc:8a:93:49:5f:05:7d:
75:1a:ad:8b:bd:02:57:67:9e:c6:a6:78:62:d9:e5:c3:c3:95:
12:82:f6:d9:95:7c:84:18:d3:88:67:20:69:84:38:30:0e:fa:
c9:ff:01:ce:9b:ec:9d:60:a2:45:80:c8:cf:8b:b7:cd:99:9a:
fb:41:de:40:83:76:cf:42:38:b0:5a:a7:89:42:b3:0a:7e:1d:
01:97:72:d5:28:f7:96:6c:a6:d8:29:e3:56:b0:f2:90:7f:b1:
cb:d0:16:7c:ba:39:e4:6a:32:f1:9f:28:e4:67:3d:d0:08:b7:
28:15:42:91:b4:43:a3:68:c7:2a:24:aa:99:a4:55:1a:65:c5:
11:d6:85:34:a2:b9:62:ec:f4:db:ff:58:f0:f8:42:36:fc:11:
13:8d:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:26 2025 by rpki-client