Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: RMddrHWzWBrQj+mBNkfsVagDGkiljTo41XMFtFf0Wbo=
Subject key identifier: AD:E2:27:68:D7:3D:61:A1:D0:32:B0:80:6A:F7:57:B6:04:2C:DC:35
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 0199FC58752663F97D000E75DA811736B19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 05B0
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: XUBeBSFPxXdRtNUjiF55OMnzMH+hHd0qZeV3A9Vrb6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:26:63:f9:7d:00:0e:75:da:81:17:36:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=ade22768d73d61a1d032b0806af757b6042cdc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:1f:e4:4c:8c:82:af:3b:b4:32:f9:79:74:
4d:82:ae:d0:52:a4:7e:cc:1c:54:78:07:8f:09:c0:
3c:9d:d8:07:0c:aa:a4:9c:91:68:75:2e:57:89:58:
d2:89:a9:cf:c8:04:3a:24:0a:27:d2:53:d0:ee:b8:
45:a3:77:b4:bd:fa:a1:4e:77:fa:3e:0a:17:b2:8a:
69:47:58:89:7d:d8:09:42:0a:37:e5:b6:ba:b8:4f:
45:59:b3:66:18:c2:e9:37:df:6f:31:5a:7e:49:30:
73:5a:2b:18:e7:69:99:23:4e:60:fc:4e:44:09:45:
7f:e3:50:20:14:b6:60:ba:02:a7:b5:8e:34:58:03:
f3:7d:04:4e:c5:35:91:20:25:8a:d7:13:a7:53:3a:
03:93:5d:49:ae:bc:16:cf:78:e4:59:52:14:cd:a1:
57:c0:22:bc:c8:5a:a5:bb:b7:84:02:b7:9d:bd:81:
bb:db:29:9a:89:e9:bc:f7:63:fe:32:3a:ed:97:24:
35:71:67:4e:74:68:13:cb:82:6e:27:ed:08:26:c9:
9a:4e:73:5e:2c:6f:e1:9b:bd:5b:56:a0:26:48:55:
34:de:b7:cc:69:2d:f0:52:05:75:fe:cf:fb:20:cf:
6d:60:e2:9d:8d:d5:4c:80:fa:6d:39:57:3d:e0:c2:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:27:68:D7:3D:61:A1:D0:32:B0:80:6A:F7:57:B6:04:2C:DC:35
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:46:de:8b:b1:37:e8:4c:62:47:e0:cd:8c:14:af:29:30:
b1:f9:14:e6:1c:bb:e5:f0:f1:b5:16:b8:0e:64:b3:37:d5:52:
06:5a:72:72:5f:c9:e1:fd:e4:42:56:6c:55:08:3b:c7:aa:8a:
90:d3:2d:c5:46:f2:86:ae:a7:3d:39:b4:a1:55:bc:93:bf:b2:
0e:01:e6:2d:25:fd:33:04:8a:74:c1:aa:07:32:e3:e4:92:1c:
3b:18:88:ce:ea:2f:84:06:3e:f0:23:64:e0:45:21:9e:97:10:
09:94:42:52:1f:fe:d0:d0:2b:ea:2d:57:eb:0f:fa:18:5a:80:
4d:56:8c:81:af:8a:b1:4c:32:92:ce:df:78:57:6a:80:3a:ac:
a2:a1:aa:bc:e4:d2:35:3c:c6:fc:a2:20:73:a5:b7:fb:5f:4d:
03:41:9d:d8:45:91:25:ba:26:3e:36:3e:a2:cf:9d:70:81:66:
ee:3a:2a:63:eb:7e:e2:3f:2b:dc:6b:5a:0b:d3:9b:96:ba:5d:
36:d2:69:c3:b5:41:2d:98:04:b6:46:ca:a6:be:1a:27:e1:ec:
e5:eb:00:66:c1:51:1b:06:88:57:8e:27:9b:1a:54:35:b6:b7:
b9:f6:48:6b:be:d7:b5:35:b0:5a:49:6f:55:b9:98:3b:20:79:
f2:0a:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:30 2025 by rpki-client