Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: tZA7lhOkZLzROp2Xgl8aXHG1PdSJTNeZHkhnWHDIN+A=
Subject key identifier: F9:A3:B8:84:89:F2:64:24:98:86:8A:3C:CB:2D:14:D0:7D:81:3C:25
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 0197B77CD264362BE9F28AF33710CD58A23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 0289
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: VbP810lN1T3xRpwL3sCCcvaenyP3/AUrx+22Hw/TyW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d2:64:36:2b:e9:f2:8a:f3:37:10:cd:58:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=f9a3b88489f2642498868a3ccb2d14d07d813c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:6a:7e:f7:a2:9e:5a:7e:48:d8:2a:5c:89:
be:12:95:ee:2d:cf:3e:c0:bd:4d:04:ef:8e:92:a0:
72:df:e1:9a:a3:8f:e4:bf:7a:51:89:f6:7e:22:97:
e6:97:39:5d:90:ae:b8:be:e9:8d:d6:2c:07:eb:ea:
9f:13:3a:0d:48:55:09:74:38:5a:bd:77:f7:5f:dd:
1d:42:98:c9:0e:34:7e:57:f0:ce:ab:f9:14:2a:e3:
e9:90:ec:9f:80:29:aa:07:9c:63:97:a7:62:8a:48:
79:a9:04:3d:ba:c4:55:ac:32:49:b9:6e:2c:81:5a:
42:11:95:a1:71:f5:2e:1c:0d:44:9e:a1:79:05:2d:
7b:b2:ef:ae:a2:22:5c:3c:e2:cd:74:82:23:a1:0c:
0a:1d:57:8f:fc:c7:16:6c:0a:eb:f9:5e:b3:0f:d5:
07:76:c1:67:8d:d3:ca:e4:20:a0:c8:72:ce:57:72:
05:72:1b:2c:dc:36:87:d9:27:61:d8:77:1d:c2:96:
18:17:d8:ea:8c:87:93:03:65:3f:73:7d:ef:9e:f5:
79:73:28:6b:6b:4f:30:b7:c4:e6:61:a2:12:f9:37:
35:97:2e:e0:99:3f:0a:27:67:64:19:a7:80:d2:fb:
a5:33:65:e1:16:04:aa:fe:c5:65:45:8d:85:9c:d4:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:B8:84:89:F2:64:24:98:86:8A:3C:CB:2D:14:D0:7D:81:3C:25
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:61:28:e4:3d:d6:10:fd:61:c5:56:7f:07:cb:40:e8:b9:
32:42:2a:13:8e:dd:4e:db:32:57:36:27:8a:0d:b7:4c:43:e9:
3f:df:53:d0:a6:1f:03:b9:f4:ee:a2:67:56:dd:30:53:75:dc:
e5:ed:93:9f:70:75:03:ac:48:1b:49:8e:28:ed:50:9d:7f:4b:
f4:f1:ca:1e:60:7b:90:65:5b:92:e8:9f:3f:93:ce:4a:6c:d2:
2a:05:cd:48:fa:d4:7d:a3:b1:de:65:5e:98:db:1b:6d:f5:11:
5c:72:be:3c:63:7d:e9:d1:e1:49:3b:13:49:52:05:51:0a:0a:
90:ed:05:70:be:15:fe:26:41:0a:e2:97:e4:d3:73:1f:65:4e:
8c:1b:4f:3f:33:2c:89:8c:e0:50:97:94:68:88:83:bd:41:83:
82:f4:54:19:a3:fb:bf:4f:62:8d:97:e0:b4:be:de:c2:6d:bc:
8a:f2:8a:5b:41:ec:49:02:bc:7c:65:0f:ae:10:9c:e6:05:04:
da:ce:9a:60:78:45:18:7c:c5:be:7f:f4:49:8b:fc:c6:e5:82:
24:cb:92:c4:2f:fe:50:df:1a:e6:ae:a2:21:e5:38:5a:05:c7:
09:b8:31:c8:19:97:a5:d2:64:02:ce:03:4a:e8:db:b7:24:0e:
16:3a:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:33 2025 by rpki-client