Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: rfESt075AWdRrLjCLVTaKix8JQXfj/nWsDF0WJxoFBc=
Subject key identifier: 7E:F2:AC:7D:7A:88:1F:16:7E:2D:24:19:6F:7D:91:45:EA:AC:74:DC
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0198D4A82040666FE6ADF88E97F5BF5992FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: LnhP+pLf9Ihi9EcKEBIwlY76Kayhqd8o4EamSb1Fw5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:40:66:6f:e6:ad:f8:8e:97:f5:bf:59:92:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=7ef2ac7d7a881f167e2d24196f7d9145eaac74dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:47:83:2c:8a:60:51:cb:82:3c:49:00:46:
ca:d0:a7:5e:04:4c:c8:08:9c:b9:29:0e:ff:57:de:
6f:cc:6d:fc:fd:f9:80:6d:84:ea:6e:a8:ae:54:af:
48:76:ec:86:43:17:c6:32:41:0b:dc:12:04:19:87:
a9:f9:d3:c0:5f:67:aa:e4:0b:8a:6f:73:c4:d7:c1:
e7:d6:38:6b:53:d6:ad:0f:d0:f4:5d:c1:e1:4a:42:
2a:48:b1:7e:96:47:be:f3:4d:53:b9:17:58:1e:a6:
f0:87:13:ff:6c:09:b0:da:e9:30:e7:f0:00:b2:21:
c3:14:dc:f3:9c:23:36:0e:7b:7e:ec:9d:8a:8a:f0:
44:7c:07:7d:56:5c:ab:c1:64:45:de:92:2e:cc:eb:
c1:b4:c9:8d:99:00:fd:78:10:00:31:3e:6b:62:c0:
1a:86:a5:5a:2d:0c:03:2e:c1:4d:af:25:17:8d:8c:
80:3d:3b:2a:3e:82:a1:de:35:8f:f4:ad:e7:a9:06:
e4:66:de:e8:c9:1b:7a:a5:ee:0f:40:a3:43:67:c2:
be:02:83:89:0e:82:31:c5:91:e5:c3:4f:1d:23:49:
69:fd:70:58:f0:3c:10:52:fd:38:d2:e7:ce:1c:b5:
54:d5:c2:50:97:7d:b9:4b:1b:bf:2d:c9:1a:b9:9e:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:AC:7D:7A:88:1F:16:7E:2D:24:19:6F:7D:91:45:EA:AC:74:DC
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7f:f6:fb:38:d1:7c:46:cf:4b:cd:70:8d:14:9f:ea:f1:01:
ed:ca:df:63:9e:37:b1:a7:7e:5e:22:74:3a:5d:07:bd:50:8b:
24:19:03:5d:80:ff:6a:6c:ec:a9:96:93:6a:4f:c7:a4:de:f3:
c6:9e:21:e9:f1:ec:df:b5:6e:5c:3d:17:e5:e7:56:19:c5:a9:
93:34:e9:91:a6:bf:91:55:79:d3:1a:1b:95:0f:50:95:f8:0c:
e6:fd:ed:cf:7e:05:98:22:ef:f7:e8:5e:32:20:ca:98:3c:43:
ca:e7:96:61:15:3c:ed:f5:bd:88:a1:41:82:ea:81:0e:7f:ae:
0c:fd:df:64:f4:f0:c0:b7:8e:69:0c:da:da:52:5f:6e:41:47:
83:55:91:61:27:a6:43:07:9d:2a:92:91:28:f1:f3:53:a5:a8:
21:35:a2:92:9b:2b:5a:ef:27:d6:f8:e4:94:83:73:1e:47:80:
a3:37:c9:93:6d:82:97:93:f1:5e:39:d1:3b:69:8a:d0:6e:90:
19:96:4b:f0:79:de:2e:92:b4:40:89:45:04:55:3c:f3:db:43:
9a:3a:75:31:1b:19:a3:70:f4:87:f4:62:21:3b:2f:51:23:9e:
b4:11:44:6d:27:65:3d:f8:8d:1a:af:7a:91:67:d9:b3:93:e5:
b2:b9:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:23 2025 by rpki-client