Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: t+3hqJuLsVu7bVJt5RQ9+vGKlN/UzPxbFR+bL+zlLso=
Subject key identifier: 35:AA:E1:E2:B0:F4:42:30:12:D7:4C:19:BA:EE:6D:A7:96:4C:BB:75
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0198D51629E42CC0EA9FA5F53818059BAA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0540
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 5eNP9bpzYXtT3bDDEDMChq+scg6ZE0U2qxvpsTo40GQ=)
2: uEevp2GUNz1b7rUD1ir2ld6ATDU.roa (hash: QtO8bxI6kXGPk5HpdZyF30S3dseJ+gcUwY5+nGoFUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:29:e4:2c:c0:ea:9f:a5:f5:38:18:05:9b:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=35aae1e2b0f4423012d74c19baee6da7964cbb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:94:b4:50:ea:9d:c6:a9:62:70:54:44:5a:
dd:88:6d:55:9c:9a:32:f0:06:8f:8b:49:3e:c7:db:
41:04:2e:a3:6a:21:fd:62:f3:ab:8a:25:fb:cf:ae:
96:af:71:4b:4c:3d:23:fe:ce:48:f5:5f:cd:a1:12:
86:60:15:7f:e1:41:87:1f:15:dd:3c:b0:2f:26:34:
d4:56:0c:08:f5:09:1e:03:e8:5d:84:75:33:43:21:
3f:ff:09:18:01:78:7d:7e:b7:74:51:44:58:a4:09:
1a:b5:f2:a9:97:c4:fd:fe:c4:bb:1a:85:d3:d4:1f:
a7:d2:80:99:74:f4:9e:39:93:f1:55:5d:3a:da:ac:
af:4e:ee:28:2b:98:22:e1:bf:f7:73:50:80:24:c1:
58:ae:cc:39:30:da:49:16:4d:b1:1e:55:1c:9f:e4:
f9:e1:51:4f:ac:2f:36:5b:ee:d5:69:22:70:e8:b7:
3d:89:cb:2c:7f:3e:b5:84:56:b4:cd:80:2f:2c:4b:
dc:0c:94:bf:d2:6e:92:02:49:8a:19:a6:23:85:29:
6b:07:91:e2:35:9d:ac:67:ea:00:03:45:3e:5b:68:
95:40:1e:a3:b8:21:10:dd:d8:e0:97:15:2f:e4:ba:
71:65:01:cd:24:46:40:4d:d1:cb:5f:14:b6:54:1a:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:E1:E2:B0:F4:42:30:12:D7:4C:19:BA:EE:6D:A7:96:4C:BB:75
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:a8:00:47:d7:ad:dd:95:7a:47:91:2b:64:d1:a2:e7:f3:
3d:2b:4c:e4:f7:e2:fd:3a:b9:7a:c3:e1:f2:ff:60:54:87:f3:
ce:53:33:8a:e6:85:06:96:c0:2e:3e:5b:fd:ac:74:81:59:aa:
9d:27:eb:d0:7f:a5:9b:e2:51:53:a7:dc:41:ab:36:a9:d1:bf:
75:73:f8:21:48:97:6b:d0:33:94:d5:38:a6:8f:ff:5e:9e:2f:
51:e0:6b:ac:03:67:8c:e8:25:25:a5:e8:cc:10:4c:5c:af:57:
ca:1c:f0:d4:35:ba:b2:57:30:4d:4d:eb:cf:ec:50:94:ab:f0:
d0:2f:63:ba:d8:5c:b6:aa:8f:d1:18:8f:f6:b8:0b:d2:9f:c2:
a3:3a:30:1b:69:cb:d3:d2:ec:f7:33:7d:9b:6c:65:fe:56:e5:
b4:69:e1:a7:4f:76:54:67:d9:a4:7d:80:26:87:37:37:de:f1:
df:bd:c0:eb:da:e9:b9:39:fe:61:ec:23:0d:06:3b:eb:34:c5:
9f:90:82:44:e2:66:c2:5b:a4:cb:0c:6c:6e:a1:6b:a6:82:9f:
b5:a6:06:a4:89:c1:3c:9a:b7:9f:05:20:67:57:52:34:84:3f:
85:da:74:9d:fd:60:bc:54:08:ca:e3:ee:f5:89:f5:03:f3:75:
69:5b:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:07 2025 by rpki-client