Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: O5Z4cXlM8iDHgYhdmwK7qcI6l+SI5cBipOmhee8hGDI=
Subject key identifier: FF:2A:BF:65:62:F0:26:07:25:02:2A:32:E3:C3:C0:C5:F4:FD:C2:42
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 0197B7EA341C7B0F85FEC9F0F3F9CA2A2064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 086B
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: bOk/PwGYrcrm/BOUeanm6YtaiRi7UoVU5fc+onr6lL8=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:34:1c:7b:0f:85:fe:c9:f0:f3:f9:ca:2a:20:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=ff2abf6562f0260725022a32e3c3c0c5f4fdc242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:e0:0e:98:41:c1:99:c0:48:68:01:19:2a:
d6:11:73:26:51:36:de:1e:03:df:71:2a:83:46:a7:
4f:87:19:8e:bf:aa:70:01:74:96:b7:5e:fa:ee:09:
45:ca:6f:c1:dd:f6:3b:81:32:8d:4c:b3:82:17:1f:
0d:cc:d7:32:ea:a7:59:b8:b1:dc:a6:dc:04:8d:41:
05:f3:57:d7:80:b2:bd:bd:96:cf:f4:02:ed:de:e2:
fe:c6:ab:c9:38:16:e3:81:61:72:34:a7:ac:11:3f:
02:78:9e:4e:05:be:2f:62:f8:4d:57:36:68:39:a3:
53:5c:bc:de:25:02:bf:55:bd:3f:77:6b:fe:d0:a4:
b0:76:e1:00:c4:ce:0f:a6:2f:12:ad:a8:c5:11:48:
b6:7e:41:03:2f:fa:61:6a:16:a4:47:d6:b7:0a:3b:
51:c9:62:8a:c0:ad:bc:08:97:b5:25:dc:5e:64:20:
f3:af:61:d9:75:c7:69:4e:e8:d4:3a:56:3b:9c:b1:
59:49:49:63:3c:0f:c7:48:80:0d:d6:0e:cc:d8:27:
9c:11:b3:2a:1d:0b:f5:55:91:9b:ca:b9:81:dc:4e:
03:0f:db:1f:25:0d:9a:85:9c:a9:b4:cb:8e:de:e2:
13:63:90:91:e4:10:94:92:f6:ba:8f:26:2c:10:71:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:BF:65:62:F0:26:07:25:02:2A:32:E3:C3:C0:C5:F4:FD:C2:42
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a9:c7:9f:82:b1:cb:f8:26:0d:e0:14:e7:23:d0:7e:7d:ea:
dc:3c:43:af:89:ef:d8:bf:89:17:22:d4:a9:46:53:4e:06:06:
21:b1:aa:a1:bc:46:bf:78:fe:17:ec:01:c6:92:aa:48:3d:3a:
df:3b:b8:ea:f9:14:08:2d:2c:b0:cc:0d:7f:5d:24:1b:07:09:
f6:98:03:26:b1:17:f1:4b:1d:2a:c2:1b:29:3b:0e:82:00:f6:
e7:34:cc:36:f0:27:8b:00:62:b5:bb:b6:40:ef:7a:6b:a2:99:
9b:4d:3d:7f:fe:36:f6:1f:5b:6d:b8:60:2c:96:cb:84:94:c6:
9e:e1:66:06:cb:71:26:d3:08:01:fb:33:8c:fc:72:bd:b6:0e:
f8:78:d8:a7:ce:cc:e1:27:f7:b1:47:3f:d6:d2:db:8d:fd:93:
31:d0:d5:06:13:aa:e9:99:9d:18:9a:ff:47:8a:80:2b:78:d1:
9d:95:d7:50:16:a7:a8:09:77:f2:4e:37:e1:ee:17:50:5b:c1:
80:e5:83:8f:8c:08:33:c4:fa:96:61:22:be:a0:67:ea:4b:7b:
4d:27:5c:15:c1:ee:e8:8b:7b:48:cd:62:75:c0:bb:b2:b5:27:
5f:07:62:76:b3:17:86:71:93:94:6c:a6:30:75:b2:85:6f:9f:
1a:fd:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:25 2025 by rpki-client