Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: qM1xDqM7KcCp2julq3ug1vNGbRfiBQPerUIobSEiYXg=
Subject key identifier: 66:B1:0C:58:72:56:CB:6E:79:74:31:9D:C2:A3:C9:56:79:02:83:95
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 0198D6CDCFB8F15D30E6685D4AF563521361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 11F8
Signing time: Sat 23 Aug 2025 12:01:08 +0000
Manifest this update: Sat 23 Aug 2025 12:01:08 +0000
Manifest next update: Sun 24 Aug 2025 12:01:08 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: TMa6f3eQr5BhW0wpOclu35gv1g1EOAU/lZNpgk3I9fQ=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:cf:b8:f1:5d:30:e6:68:5d:4a:f5:63:52:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Aug 23 12:01:08 2025 GMT
Not After : Aug 24 12:01:08 2025 GMT
Subject: CN=66b10c587256cb6e7974319dc2a3c95679028395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:d0:33:7b:32:c4:eb:1a:88:61:43:c1:f2:
05:8b:dd:a6:26:12:1e:dc:96:05:eb:aa:54:54:8d:
96:e7:44:33:37:79:86:93:fb:f4:98:7b:38:31:de:
e6:de:30:56:4d:f7:92:31:ff:3e:c2:ad:c3:5c:ea:
58:f5:7e:b7:83:4d:ff:2a:a4:d9:25:c3:9a:e5:da:
83:31:2b:9e:8a:24:7f:4e:ad:5c:e5:17:5e:59:01:
65:71:59:cd:8a:7f:99:a2:5b:82:7e:e1:33:85:13:
98:9b:5a:04:66:df:29:a9:74:69:d5:ec:23:95:05:
f8:7b:70:c6:8b:74:58:10:f9:c1:2c:f1:7d:aa:ce:
0c:72:f4:cd:99:ab:f8:59:05:5b:69:ab:5b:0e:e5:
f4:1c:89:35:a4:39:13:ac:5d:48:2d:ea:53:36:7b:
70:f1:6b:29:b7:d7:d8:44:d3:e2:1c:ee:84:c5:b9:
42:41:e8:85:d1:b1:21:b3:01:8a:45:c1:9a:22:cc:
24:32:5a:bb:c0:ad:19:b8:1e:92:66:84:2c:43:ad:
ee:6d:1d:2d:2f:29:7b:38:02:02:45:f4:6a:47:d6:
03:db:d1:20:55:a5:86:1b:53:47:63:44:fc:bf:b1:
19:4f:bb:9e:39:30:4f:1b:ff:cc:a8:b1:34:5a:0d:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:0C:58:72:56:CB:6E:79:74:31:9D:C2:A3:C9:56:79:02:83:95
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:80:15:93:d7:38:dd:47:70:69:43:0a:39:40:f0:eb:52:
10:82:a4:d0:37:3f:f0:7d:c6:71:47:f5:dd:88:61:5f:7c:0d:
ee:aa:f6:94:3d:8e:64:e8:34:eb:cf:62:1f:42:3f:9a:f5:eb:
a9:81:a3:8c:cc:f0:33:41:1a:df:52:5b:55:79:a7:52:4e:06:
94:60:c5:94:6d:63:de:36:f1:b1:3b:91:61:2a:98:42:96:58:
51:e4:2a:37:be:b8:b4:47:73:e7:6d:0e:d6:00:94:44:88:93:
11:e5:cd:26:0f:a4:1d:56:12:4d:5a:99:fe:16:76:1c:ec:f8:
e0:26:c8:3a:37:a8:56:71:ab:21:70:89:77:dd:0b:2c:87:6e:
d4:0e:46:de:5e:90:e5:1b:a3:22:60:6e:42:72:f2:d0:36:92:
68:e1:0d:6a:c5:fa:e4:ed:02:b9:ad:19:72:d5:f5:ec:22:fa:
f0:96:48:cb:b7:59:9e:d1:ca:9c:05:e0:2e:e6:45:1b:79:70:
a1:f0:95:5a:dc:30:0e:b7:b3:e0:2a:e5:02:4b:54:af:1b:4f:
91:29:93:29:9f:47:cc:e9:0d:59:2f:5e:08:c5:06:f2:b9:f8:
ec:cf:7e:1e:c5:ae:c5:8c:71:8d:03:6a:c4:2f:4e:db:3b:a3:
a8:70:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:50 2025 by rpki-client