Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier: 8PGuQadGnFzZ5SqbVNjy5Su7ZjVmF5DZjJf3014Ftmc=
Subject key identifier: B5:72:5D:C3:EF:4D:9D:5F:14:88:5F:84:1A:EC:99:E2:C9:13:0C:F8
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial: 0197C614661E7716366041EF0CD2C867544C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number: 4C
Signing time: Tue 01 Jul 2025 13:01:54 +0000
Manifest this update: Tue 01 Jul 2025 13:01:54 +0000
Manifest next update: Wed 02 Jul 2025 13:01:54 +0000
Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: tCnJTw3s+0YWUy5doNADNmlOz/EVVM5RSBcgV6ULC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:66:1e:77:16:36:60:41:ef:0c:d2:c8:67:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Validity
Not Before: Jul 1 13:01:54 2025 GMT
Not After : Jul 2 13:01:54 2025 GMT
Subject: CN=b5725dc3ef4d9d5f14885f841aec99e2c9130cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:2a:96:b1:f8:2b:bf:27:a6:54:b9:22:66:
5d:08:d7:cd:d6:ca:1b:f4:76:3d:4d:e3:51:3c:64:
65:5a:d5:c9:7e:6d:ad:73:13:ae:76:61:5e:4e:e7:
72:48:ee:1d:fb:92:d8:82:ad:ac:7f:ff:9e:9c:93:
72:19:03:b3:43:42:17:45:b5:44:41:b8:50:10:85:
39:48:5a:1b:ac:ae:a6:d0:53:bf:06:84:c5:c9:4d:
c5:c8:78:e4:58:45:51:5b:43:34:30:d5:f1:7d:32:
21:2f:ae:5d:4b:03:5d:ee:56:fd:84:aa:7c:1c:ae:
f5:6d:38:26:43:13:fc:56:13:b0:aa:76:84:e4:fd:
a0:0f:b2:6c:e5:88:49:46:39:7d:cb:ed:bd:c2:e4:
c6:58:98:c5:8e:bb:98:5e:4f:f8:bd:4e:75:17:ee:
69:be:e3:82:70:2f:9f:b2:ea:6e:f5:c9:f6:84:22:
58:53:16:e1:26:96:24:58:25:68:3c:6b:84:6c:f6:
8c:0e:06:37:85:69:26:0e:77:78:43:78:f3:01:1d:
95:d9:09:a1:c9:2e:ce:25:f0:de:ea:2f:55:43:d3:
fd:48:f3:3f:2e:3d:b0:a4:7a:36:05:94:a4:76:b1:
5f:91:d5:88:76:e7:54:d6:c8:d9:0c:0f:3d:82:e6:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:5D:C3:EF:4D:9D:5F:14:88:5F:84:1A:EC:99:E2:C9:13:0C:F8
X509v3 Authority Key Identifier:
keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:f2:83:4e:80:20:e8:71:ab:cc:c2:a0:a5:94:42:fc:e6:
33:f1:82:ce:b7:c4:b9:58:b8:5d:41:88:c3:85:68:a9:26:5b:
38:0e:e9:73:b6:b0:9a:23:8b:69:87:f0:f7:b3:c1:d8:cb:eb:
e4:4b:00:65:09:13:54:58:ee:93:b5:8e:cc:b6:df:96:26:27:
13:77:87:9d:6e:1a:26:70:46:62:3a:f1:e6:13:5f:5a:81:81:
3a:76:5e:c6:35:ee:c9:9c:b7:9f:3e:f8:df:c7:c6:28:1d:a3:
b9:b7:35:28:b7:1e:f1:17:1d:ec:1e:72:57:b2:e9:64:c5:0a:
2d:00:d0:cd:0e:44:65:9d:f3:d9:e8:36:0a:cc:e1:93:58:6e:
1c:2b:11:3b:e0:69:e9:6e:89:31:80:e7:ec:82:0e:46:b9:2d:
5d:c6:0c:ba:92:df:ee:ae:4d:63:ba:11:42:9e:69:4f:70:4e:
49:8f:ff:3b:8c:46:64:47:bb:df:f9:68:26:ae:1c:af:e2:19:
ca:90:aa:7e:33:da:ca:ac:8b:8b:c7:9d:47:51:b2:e1:9c:15:
2a:ba:b5:e2:0d:8c:b8:5b:39:73:58:96:2a:8e:ef:ac:ca:73:
f5:81:b3:eb:cb:9f:1f:12:31:a0:af:a6:0c:3d:7d:0b:97:4f:
41:66:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:46:34 2025 by rpki-client