Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: v/8EvfvZ8ID83kRpA6gPf4Toain8HSL9ULJYJ8+XDgs=
Subject key identifier: 3B:71:3D:C2:EE:DA:E7:4F:87:B4:C6:C0:70:66:E3:E1:A2:7A:AB:FE
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 0198D4E0E2539B40230D5E3AA222AC02E2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0517
Signing time: Sat 23 Aug 2025 03:02:44 +0000
Manifest this update: Sat 23 Aug 2025 03:02:44 +0000
Manifest next update: Sun 24 Aug 2025 03:02:44 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: n65R8GRy1cFGSBFuhGsySBaAk4UKackDmFMJqo6daYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e2:53:9b:40:23:0d:5e:3a:a2:22:ac:02:e2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Aug 23 03:02:44 2025 GMT
Not After : Aug 24 03:02:44 2025 GMT
Subject: CN=3b713dc2eedae74f87b4c6c07066e3e1a27aabfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:67:d4:d4:fe:98:62:e0:04:e3:f2:9a:01:
ec:bf:8c:26:4f:88:e5:5c:b9:fc:aa:06:ba:af:bd:
54:64:99:5e:6d:02:ea:b7:61:74:ad:04:1c:c4:e3:
55:f5:3c:97:3d:f7:25:cb:e8:fc:43:61:62:60:3f:
9d:4f:c1:cb:e6:61:f9:b0:35:64:61:6a:b2:0d:38:
27:31:bc:95:c9:83:be:45:6d:e4:3d:3f:63:6c:c5:
dc:d9:97:a8:10:3a:2b:db:63:9c:e5:df:c2:c3:33:
ea:c2:c3:b8:2e:55:49:d5:31:8f:2c:61:75:84:b6:
3b:20:a8:82:50:5e:cc:70:59:f7:14:fe:47:0c:6d:
08:7d:37:29:71:df:e5:fc:e5:6b:d8:b4:bc:4b:a6:
a1:9e:02:59:b4:f2:79:dd:11:ad:93:d7:e9:78:11:
bb:dc:fb:84:72:93:db:61:61:63:e2:33:6d:96:c2:
4c:63:fc:81:7a:99:e7:96:98:03:13:19:18:72:05:
b9:97:4f:64:5e:60:f3:4d:2d:f3:02:93:bc:8e:7f:
4c:e1:38:89:ad:e4:08:ce:d5:b7:7c:64:c8:3a:a4:
68:93:94:88:da:78:76:ed:2d:8f:74:e2:24:b0:8b:
14:0f:62:8f:59:e2:c6:5f:d3:56:db:6f:22:11:7c:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:3D:C2:EE:DA:E7:4F:87:B4:C6:C0:70:66:E3:E1:A2:7A:AB:FE
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:fe:8e:fa:85:e9:64:db:55:b7:a7:85:84:33:e2:13:e6:
f5:e8:b6:50:84:9a:39:c4:84:de:4f:f5:cc:df:8f:ff:09:24:
36:f4:5a:e3:9a:e7:eb:80:70:19:d5:96:da:fc:5a:77:10:6f:
14:66:0e:8c:66:c2:57:16:61:19:3f:1d:6e:e4:f9:2a:39:5c:
be:f3:37:0a:aa:e1:5b:87:62:67:70:6f:56:f2:9a:21:3a:ca:
9b:dc:26:61:31:0c:75:90:5c:9a:db:8f:0f:53:84:cc:70:a8:
c9:fb:b0:96:2b:83:0b:6b:2d:1d:da:96:16:33:45:82:bd:fe:
84:0f:72:ea:e0:40:06:a7:4b:c0:73:e1:ec:22:f5:ca:d9:ae:
ab:f4:4a:1b:b9:7a:f9:1b:43:49:9e:d9:10:1a:43:c7:7f:a6:
5b:ad:27:61:5f:56:14:b4:dc:a4:41:e9:db:49:bf:e8:a7:f0:
1a:a9:17:e5:00:dc:ef:09:c0:7e:0c:ea:5e:02:ec:95:20:0f:
ab:f8:28:ec:95:7f:cb:0a:a6:d4:79:eb:60:73:66:d2:e4:a4:
76:14:51:05:c4:4b:ba:ef:9e:76:0f:62:52:e2:56:ce:54:d7:
31:0d:d1:95:35:bd:87:61:95:71:a4:b2:4f:83:84:f0:bb:0c:
f3:fb:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:02 2025 by rpki-client