Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: te7vcz0Mugv69lhdnBIO/UEGtB46OMpRy9Caeqquho8=
Subject key identifier: 8F:15:70:67:9A:7E:29:5F:A3:D9:5C:C1:2B:95:0D:18:0E:5D:A0:3C
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0197C9F127647FB0C350DA585251D16195A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 07:01:54 +0000
Manifest this update: Wed 02 Jul 2025 07:01:54 +0000
Manifest next update: Thu 03 Jul 2025 07:01:54 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: m4Ihji7Wb1Z6BRefNTtLrFr0aLjEiEJgGtXVBPK6IKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:27:64:7f:b0:c3:50:da:58:52:51:d1:61:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Jul 2 07:01:54 2025 GMT
Not After : Jul 3 07:01:54 2025 GMT
Subject: CN=8f1570679a7e295fa3d95cc12b950d180e5da03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:71:9e:94:cf:39:08:58:b7:f6:4f:0b:3d:
c4:25:47:55:f1:59:8e:9c:f1:50:d4:f5:a4:79:cb:
a9:27:b2:85:99:72:7a:c2:40:7d:21:84:1e:db:3d:
87:df:4b:b6:ac:46:7d:8f:5d:4c:c0:3f:ff:b8:a5:
53:74:3a:be:a1:bc:6a:e5:93:98:8e:63:6c:d2:87:
2b:86:8a:90:40:f5:c2:c2:bb:b7:89:d3:6f:0c:35:
f5:cd:a3:c3:16:18:c1:98:93:ad:9d:34:4e:66:4c:
91:06:12:f8:0b:7d:22:63:17:9a:29:45:b0:cb:cc:
53:5f:f4:15:68:9a:ab:93:c3:5b:a2:15:9a:dc:6b:
a2:ca:f5:ff:16:9b:b2:7b:61:83:0a:32:b1:f5:4c:
7c:6a:7e:3f:0e:d9:c4:e3:f5:d7:89:a7:6f:5f:cb:
a2:f3:b4:f1:a7:9b:59:52:c9:ef:84:c5:55:b0:a0:
8c:b8:ac:3f:1f:f8:3f:84:ce:b3:06:17:8d:2c:b4:
df:40:5d:07:87:6b:59:e9:5c:4e:e9:5f:14:8c:7d:
3b:d1:a4:00:c8:80:40:f7:d0:a6:ed:57:3e:2f:2b:
c0:ec:e4:57:82:9f:f0:47:68:c8:d5:a1:8a:9a:2e:
4a:4c:37:ce:62:fa:c6:f8:72:f1:bf:13:7e:a2:b2:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:70:67:9A:7E:29:5F:A3:D9:5C:C1:2B:95:0D:18:0E:5D:A0:3C
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:eb:3f:b0:8c:51:96:77:05:94:80:c6:83:e6:cd:2b:8f:
0e:d0:4a:58:90:cf:55:74:54:76:ee:db:f0:3d:6f:5b:79:5e:
8d:5f:35:95:a6:75:18:de:bf:3c:06:da:d1:aa:1f:78:11:c7:
25:50:39:4d:a1:99:76:5f:cb:ca:d6:5d:d7:ee:ef:41:cd:67:
8e:67:ba:f0:c4:09:f6:e9:07:d2:8d:2c:ec:b8:88:73:c7:e5:
9f:10:e2:d3:fe:70:2d:c6:4f:5c:8a:32:d8:07:28:d5:f2:47:
14:df:3d:3d:a2:05:d3:68:ef:d0:f9:15:42:7d:b2:b4:c3:4f:
13:9f:ba:48:60:1c:45:f5:a7:e5:27:61:42:68:cc:16:9e:78:
d7:74:28:55:bd:13:c2:39:51:f3:ed:bc:14:16:46:a4:6b:2f:
8d:4f:7d:4a:86:be:59:8e:0c:09:e7:de:8b:8b:86:72:f9:fa:
a1:05:ec:d1:1e:34:5b:84:24:6e:08:12:fd:44:53:60:a4:c9:
f6:16:8f:51:b6:52:2e:bd:e4:1b:63:15:47:6f:e8:d9:3a:73:
3b:ef:6d:e9:b0:66:74:38:af:be:65:6a:2d:7f:e6:17:38:6e:
a5:10:25:78:0f:0d:7c:82:90:23:78:92:fe:a6:23:3f:d1:b1:
a9:3f:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:33:43 2025 by rpki-client