Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: XCEILEcjLdFPOaic3XkLJeU2cXQxcClHadVs5z40X/o=
Subject key identifier: 8C:2C:11:32:50:99:A6:48:D2:74:2C:51:EE:F6:9E:41:7A:C0:9B:43
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0198D473AFC2389E7CA72381B63A3C794000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: rdrYXSv3MVpQZt2iRiW1fVMaJ+r+jhBlyNpVWBNF6ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:af:c2:38:9e:7c:a7:23:81:b6:3a:3c:79:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=8c2c11325099a648d2742c51eef69e417ac09b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:c7:73:d3:8f:1e:06:4d:fe:da:c3:2d:12:
29:64:7a:7a:f0:d6:97:3b:11:47:a9:31:39:33:fc:
23:8a:0e:7c:af:c0:fb:1a:98:a9:83:09:86:ee:a2:
a7:13:53:2b:8b:b3:e2:d1:d9:5f:19:1a:7f:9e:f6:
05:0b:34:ab:20:f0:75:e7:77:77:8a:57:f7:10:b9:
d7:9f:65:a5:1b:75:4e:2d:65:6e:f0:81:a5:f6:bd:
f7:97:2c:48:35:42:db:4b:ea:96:ac:5a:17:9b:a0:
8f:a6:04:89:46:49:38:43:64:0b:fe:46:1b:e9:71:
ab:8c:90:96:e5:c2:bb:0b:07:d0:3f:52:80:c6:d4:
01:00:f8:79:d8:3e:7b:99:c1:21:8d:8e:9a:ad:71:
ec:32:72:36:f4:c6:23:c9:7e:61:1f:c0:32:f7:3b:
97:cd:a6:f8:d4:5b:97:ad:f0:96:72:f8:00:18:72:
c4:e8:2e:38:29:e9:e0:bd:93:ca:18:e3:5d:42:4b:
f3:a6:a1:40:65:f3:e1:61:cc:ce:c9:6a:69:70:1b:
d2:f8:1a:51:04:79:68:4b:17:5f:9d:3c:43:d0:9a:
df:e9:b0:99:08:b1:d4:30:63:bb:50:7d:de:18:3f:
ba:9c:1b:7d:80:c6:08:b4:ed:cf:09:a6:9c:c4:e4:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:11:32:50:99:A6:48:D2:74:2C:51:EE:F6:9E:41:7A:C0:9B:43
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2c:b4:eb:97:55:23:ff:ed:df:bd:b1:a1:9d:28:03:fc:be:
81:e8:85:30:5d:79:a2:90:37:65:1b:5d:b5:c6:e6:10:93:a0:
a6:11:e4:01:dc:6f:bf:62:42:7b:54:ee:01:71:74:e1:ce:80:
19:82:63:59:17:36:f9:5e:92:ca:46:91:af:15:a7:3b:35:d4:
43:5c:f5:7f:bf:bd:ee:9e:90:65:10:74:a8:0f:c2:69:d4:9b:
e4:c6:34:87:f3:20:15:9f:13:6d:16:f3:f6:ca:14:6a:cc:c9:
05:c4:0e:85:dd:5e:fb:40:c4:fb:7f:71:0c:4f:61:d8:b6:d5:
56:64:0b:4e:30:f4:bb:d9:33:bd:b1:45:35:0b:98:82:22:95:
d1:eb:82:1c:47:b6:81:13:dc:38:3b:1c:97:e9:df:c8:f5:63:
fb:34:98:81:80:eb:5d:08:8e:71:2e:86:a3:a7:fc:a6:f7:4c:
75:a3:b5:92:f7:7b:5e:9e:2d:50:79:2f:4a:ad:06:d6:86:80:
cc:96:d0:5b:95:3b:87:7a:ec:83:50:5c:5d:7f:2d:0f:ac:a2:
2c:3f:53:a5:55:f7:20:7a:19:d9:38:87:10:af:85:50:2d:db:
5c:76:48:b1:bc:bc:fa:70:be:05:7f:25:05:56:5e:d0:c4:3a:
9a:1b:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:48 2025 by rpki-client