Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: UwwncCbNRT7K4/zHn7ygQyBEHsWS3gsplTjOnAQLIUA=
Subject key identifier: F2:DF:5A:2F:74:B4:3F:A2:BC:82:EA:D8:37:C0:F3:E8:1B:3C:A2:4A
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 0199FEB4C5364C9367B304EC9DA1EC6BD922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 03B7
Signing time: Sun 19 Oct 2025 23:01:23 +0000
Manifest this update: Sun 19 Oct 2025 23:01:23 +0000
Manifest next update: Mon 20 Oct 2025 23:01:23 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: dgcng63dJzt4BSyyVXpCGf3WSkLDDD0ZGPQI924lKLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c5:36:4c:93:67:b3:04:ec:9d:a1:ec:6b:d9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Oct 19 23:01:23 2025 GMT
Not After : Oct 20 23:01:23 2025 GMT
Subject: CN=f2df5a2f74b43fa2bc82ead837c0f3e81b3ca24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:ac:79:9b:5a:75:70:5b:4c:f2:81:a4:60:
df:7b:a2:04:7c:fd:7b:a9:84:02:80:12:6b:70:cb:
6f:43:f0:8d:19:67:a9:95:94:32:b6:bc:18:c4:3f:
68:83:05:f1:2f:cd:19:4a:1a:c6:6c:ce:7e:e8:47:
38:38:78:1e:4c:6e:d0:ef:02:43:3b:4e:55:9b:70:
de:6a:57:dd:c6:e6:77:d3:61:c5:5d:cb:2b:49:19:
83:5e:7d:e0:d8:48:d7:23:d7:11:6c:a1:24:e7:45:
e9:17:1b:41:e6:af:b9:51:01:09:2a:97:0a:95:2c:
ff:95:82:74:f8:e8:02:e8:86:4d:b5:a9:4f:a4:53:
5c:9f:b4:9e:5e:fa:8b:a3:e9:65:67:29:c4:25:5f:
f8:32:8c:cd:46:cb:0e:e9:63:15:68:ea:1c:bc:fb:
e6:1b:76:91:44:0f:25:dd:43:02:f4:2b:36:83:05:
20:bf:c6:8f:fa:29:d1:79:f9:23:77:fe:4b:03:e7:
1d:2c:2f:e8:f1:7a:3e:a6:3a:29:6a:f4:dc:62:b2:
1c:02:31:0d:d3:5a:ca:aa:77:22:2c:13:f1:c3:22:
b6:41:cb:de:80:49:58:59:d0:a7:af:8f:67:50:df:
5c:12:75:ea:93:21:b5:72:9c:2e:57:dd:90:d6:a4:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:5A:2F:74:B4:3F:A2:BC:82:EA:D8:37:C0:F3:E8:1B:3C:A2:4A
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:9d:41:39:34:13:5c:71:fc:99:81:7f:30:ae:ce:98:c5:
68:fc:9e:eb:2b:b6:ea:0b:23:79:38:a3:6b:19:48:5b:39:70:
b0:1d:64:bf:9b:5f:0a:8a:4e:eb:95:5b:de:80:f6:9d:e7:49:
f5:21:54:aa:8b:df:96:57:06:46:4d:bb:cf:a6:bd:4c:65:7a:
1b:db:5e:ad:eb:cc:f5:81:39:1d:df:a6:1b:c2:53:fd:ec:72:
98:4b:1d:d0:98:44:a1:6d:1b:1f:8f:7c:a9:e2:46:d9:1c:2b:
9b:b1:2c:d1:cb:2b:6b:f2:08:0b:46:85:bb:6f:bf:ac:b9:7d:
3d:77:15:df:c8:2c:64:a7:95:e4:a1:38:2d:51:1b:bc:96:a4:
78:e8:93:6d:69:b8:4c:a8:e0:4d:cc:3c:64:74:be:ad:90:f5:
7b:ba:c3:06:7e:12:f7:2e:b7:86:c0:24:71:86:ef:76:a3:a9:
ee:d5:8f:f3:d1:10:fc:dd:17:a4:fc:ff:c3:95:d2:3a:67:98:
61:48:df:c6:4d:c2:c8:f7:19:e0:e0:a3:ec:4b:9c:8a:74:20:
17:4d:40:87:38:8b:4e:26:f6:47:8d:da:ed:a6:9a:a4:39:3a:
dc:62:f9:61:07:1e:f5:f8:4d:be:4d:25:ae:df:8c:1d:92:5c:
6b:2c:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:16 2025 by rpki-client