Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: 0r17ftci84nc8lDlAUwR4vkJUQyIx+NjGV1Ci1F9TEw=
Subject key identifier: 41:69:B9:A0:51:47:25:C2:2E:E3:20:87:F3:3A:28:11:85:93:C4:D4
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 0197B6A0CFD90D8F1F5660AE05D21E7C870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 052F
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: J1a2GoybqrIQwOmRLfmoh0XNpcPhQe6miWWs1MXSTaw=)
4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cf:d9:0d:8f:1f:56:60:ae:05:d2:1e:7c:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=4169b9a0514725c22ee32087f33a28118593c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:57:a3:45:ce:9c:46:0f:b9:33:ef:f6:f5:
01:aa:df:11:5a:23:a0:11:9b:6e:6d:af:13:7f:ab:
44:f8:95:ce:01:d3:4b:9d:55:9c:e6:0d:80:bc:1d:
87:a4:23:57:c6:d3:c6:c5:bd:8e:07:68:04:ed:5a:
0e:f4:8b:95:4e:a2:cb:ea:7d:f0:9c:94:14:e0:68:
84:46:10:f2:91:ee:a9:8c:ba:aa:cf:f1:25:f1:d2:
06:0d:05:b5:20:e3:bc:f2:50:25:77:88:50:4d:c0:
f0:c8:34:54:e2:24:c6:02:c5:67:50:61:7d:f3:fe:
e1:5e:89:a6:e6:ff:cf:e7:24:bc:37:f4:54:5c:d4:
02:da:1f:4b:ab:8d:75:63:ec:ca:69:d9:0a:2a:c3:
bb:56:91:6e:75:c1:36:04:2f:3a:f7:8d:b8:89:98:
1a:b2:d6:79:76:26:52:05:e4:61:51:53:ba:1a:c4:
19:de:39:a0:13:ee:1f:6c:21:9a:56:2e:97:32:9f:
c6:78:bd:e4:5e:80:fb:63:14:72:18:8c:13:1f:1d:
2c:c7:22:26:4a:2f:da:d3:57:67:49:86:14:fb:31:
b9:ab:54:59:52:46:92:5d:f1:99:92:e3:a3:be:5c:
bc:2f:8c:89:b5:44:65:73:bc:73:bb:f5:c8:11:66:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:B9:A0:51:47:25:C2:2E:E3:20:87:F3:3A:28:11:85:93:C4:D4
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:2a:cc:ec:b2:9f:48:b9:5c:bb:22:1a:89:0d:7a:2b:f7:
a5:10:33:22:d0:76:88:c8:7e:3e:35:0d:64:6f:69:44:b4:79:
28:7a:fa:41:50:77:30:7c:19:47:29:fa:31:0e:df:63:39:3b:
91:19:a7:ff:25:bf:5b:5c:0e:0e:28:df:d5:60:69:e9:b4:51:
3d:7c:bb:dd:e6:de:50:1b:4b:8e:86:72:ad:e9:2f:9e:62:9a:
6b:e2:cb:4b:f1:07:c7:98:04:9d:c3:cc:c3:aa:37:97:28:98:
f7:31:44:3d:d8:33:f2:25:ad:88:72:6e:7e:ee:49:1f:29:a2:
62:92:8c:c7:46:c8:10:70:3c:a8:3a:e3:2d:0a:52:85:c4:53:
83:04:ac:0c:7e:76:77:e4:ba:78:6a:b4:94:43:2e:9a:f3:d9:
ab:ed:28:af:a8:2b:0a:40:d3:4a:65:37:5d:c6:8d:a0:90:61:
6b:5f:a3:f9:b9:fd:34:52:21:82:65:3b:3f:f7:40:d2:b6:d7:
a9:18:13:16:37:71:0b:e7:b4:53:80:05:1a:59:1c:f2:ea:34:
98:b2:12:14:83:f5:c3:f1:0d:4f:58:18:2b:74:c4:ea:d8:d6:
a4:6e:c7:cf:a0:77:92:4e:48:91:ab:4d:cf:e2:20:39:c6:0d:
d9:fe:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:53 2025 by rpki-client