Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: 2o1P75RIi2DlaYENE+5K2Kiu6HwWhpXCtKpvO5x0gB8=
Subject key identifier: 6C:A0:5F:6B:62:25:A3:D9:B0:B4:E1:6D:CE:A2:3A:16:51:0A:8F:28
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 0198D660C57D71504A661D4B9306B4AC76A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 0607
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: vmZj5/XU/eKw4kFnn918kgBYUX1BChD3n3GjnMeckD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c5:7d:71:50:4a:66:1d:4b:93:06:b4:ac:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=6ca05f6b6225a3d9b0b4e16dcea23a16510a8f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:47:3e:07:ab:02:58:88:9d:b0:15:6e:f4:
1a:fa:79:07:ae:83:e1:42:4a:67:c7:23:11:54:36:
37:16:52:d9:7c:13:d1:a7:28:16:e6:84:2e:8c:cc:
93:eb:70:38:ee:f4:50:90:9d:39:c6:46:c5:f7:e8:
7b:c4:55:16:92:4f:37:f7:f5:91:3d:6c:24:ed:1c:
0c:71:81:10:27:22:18:7e:bc:af:d7:a3:d7:6c:f7:
99:92:46:f8:16:d5:de:1e:89:23:d4:3f:bc:41:11:
33:2c:3d:06:21:78:8a:96:15:93:c2:28:44:9a:71:
41:47:c4:ad:f4:7d:85:ad:65:dc:c6:e3:59:94:b7:
53:b2:07:2d:18:4d:9a:d0:e9:69:4c:12:f5:ed:47:
a5:2f:12:95:c2:35:d7:86:3e:f1:2e:c0:1b:18:51:
0a:09:ec:24:3e:0f:75:dc:a8:a7:f0:f6:2e:f5:3b:
da:b6:2b:3e:a4:0f:ee:7d:03:42:62:16:4a:be:c4:
a7:e7:53:d1:b8:98:03:6b:26:bd:7f:54:07:5f:61:
c6:60:d0:54:95:37:85:82:bb:95:3a:8e:f7:d6:7a:
84:e2:0d:c7:64:3e:96:f7:7c:cc:87:57:dd:e6:fd:
e8:87:76:c9:71:16:24:86:b7:63:35:a4:8d:6c:ca:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:5F:6B:62:25:A3:D9:B0:B4:E1:6D:CE:A2:3A:16:51:0A:8F:28
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:8a:17:3b:ad:2c:c3:72:eb:86:18:06:12:2f:9d:3b:62:
21:00:64:fa:b7:0b:ce:70:71:0e:b9:0b:9f:ef:38:28:0b:3c:
a4:12:ae:1e:f3:b4:d8:1f:3f:8c:b7:9d:92:51:63:9f:74:67:
35:96:d5:f7:da:59:e7:02:32:5f:4b:a8:a8:07:48:5a:f5:46:
91:43:30:6b:94:94:34:5e:b1:88:c1:8e:fa:5a:97:42:21:11:
c9:63:d5:c6:39:ac:32:1f:61:5f:e4:67:b3:d8:da:06:cf:20:
2b:86:14:18:cc:1a:72:d0:42:5e:95:78:c1:d0:39:2e:3b:12:
0f:04:30:af:eb:40:44:73:e9:03:55:f3:2d:8b:71:21:b7:d4:
89:74:a5:5a:21:a7:f5:cf:23:2f:83:b9:17:fb:5d:74:a4:92:
b5:53:40:f2:a7:7b:31:e3:f7:5d:d0:a8:3e:2a:ce:85:65:9c:
0d:71:94:08:b5:57:b3:15:2b:d6:c3:71:f9:84:ae:c7:eb:0b:
a9:b8:0c:96:d6:c9:6b:6b:85:38:b5:4c:0e:01:7a:fd:56:b6:
42:46:d5:3d:7c:df:24:9e:f4:7a:5c:9a:ed:d3:bb:7c:20:4b:
4d:9d:4d:25:15:5f:f1:0b:d8:20:e9:dc:b3:9c:0e:12:40:a3:
6c:67:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:59 2025 by rpki-client