Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: mgt9Fsbc8njDDZ85kQbnrJago8YvafYytILog868DHw=
Subject key identifier: 55:C3:2E:A5:79:FB:86:7D:0C:B7:EB:1C:18:23:A3:26:03:59:FF:0C
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0198D5BBEBC0499623F6131FC383B03394E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: wRxLYcPK0oCyfvw6fMT7/eD2c8eL4zPaYe0xU7BuqlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:eb:c0:49:96:23:f6:13:1f:c3:83:b0:33:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=55c32ea579fb867d0cb7eb1c1823a3260359ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dc:e4:3a:d6:c5:de:2d:92:18:e5:54:86:6b:
79:00:6d:77:e0:38:69:fa:25:08:98:04:2b:85:0c:
c3:12:9a:e6:69:f9:54:d7:b2:2f:e9:ce:fd:8d:20:
a4:01:1a:ed:1b:af:8c:2e:16:09:6a:61:27:24:45:
61:47:d0:53:3a:03:03:ff:82:33:95:e3:be:05:42:
e7:47:d0:a7:68:2a:71:d6:2f:09:6a:6d:d4:27:5c:
f4:12:06:87:a0:5c:0d:1e:1d:38:e1:30:18:8a:43:
31:57:88:2f:f5:ba:18:46:22:d6:69:c8:f6:7f:72:
26:aa:57:1b:50:b0:bc:c0:6d:4f:ad:b4:27:b6:af:
11:c0:28:18:f7:99:cd:82:6c:6b:41:f4:00:d7:39:
70:7e:e6:59:87:3e:47:73:1b:48:1a:e0:a3:a9:2b:
ff:97:33:cc:6f:86:63:82:f9:a7:3d:be:8e:c8:d5:
84:6b:a3:d1:56:98:de:f2:d3:f6:61:42:24:17:a7:
61:4b:cd:c0:52:53:b5:5c:5b:dd:37:60:5a:d6:f4:
13:58:b5:46:b6:2c:25:87:ea:43:a5:07:68:c6:65:
16:1c:77:0e:ae:fe:aa:17:0d:f5:43:a8:69:5e:36:
ef:0d:77:a1:e2:18:4e:70:f1:04:5c:16:f6:9d:eb:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:2E:A5:79:FB:86:7D:0C:B7:EB:1C:18:23:A3:26:03:59:FF:0C
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:45:74:89:8e:5b:af:b8:da:e2:bc:9b:3b:9e:8e:c6:cf:1e:
ae:48:7b:5e:3a:db:86:6c:b4:6b:96:d6:c0:ed:a3:55:3f:18:
02:71:c9:82:64:3e:1f:de:0b:b0:a1:e5:0f:cd:35:bf:dd:53:
e8:d6:57:89:4d:2f:37:11:cc:2c:9f:d2:69:f7:e6:85:17:ef:
93:a2:81:58:ff:09:6c:b7:4e:4c:f9:c1:7b:1e:1f:6b:1f:f5:
99:54:13:3e:06:81:a5:81:3c:64:2d:18:e3:72:f8:4f:c4:ef:
e7:9f:69:de:f8:2f:e8:6f:db:b2:90:98:cb:7e:94:d8:b5:a2:
ec:54:d4:3e:60:47:91:e8:94:bb:d3:42:96:cf:56:2f:61:c8:
a1:f0:df:31:8e:95:08:7f:17:3b:89:96:f0:d9:9a:7f:55:34:
f3:98:f4:fd:ff:39:b7:82:b3:57:18:32:a7:d0:7f:1e:be:a2:
8f:6e:90:57:26:4d:fa:0a:3b:80:b3:e1:0f:62:ab:3f:4e:64:
bf:99:29:78:0d:56:b3:46:4a:b6:7c:6c:63:52:58:82:31:5c:
1b:e9:4e:77:89:e5:9c:7f:43:cc:a4:f5:54:40:fb:b1:b4:e8:
68:21:74:6a:d9:fe:8f:6c:d0:0f:f3:46:9f:7d:ac:fa:68:e8:
38:57:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:06 2025 by rpki-client