Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: VQRfe6jiOc2f0+CdS5hg5QTMu6F4uWRdjzq0RB4NqwA=
Subject key identifier: 6B:21:7B:33:CC:62:BD:0F:19:76:01:D9:66:37:FA:E6:4F:2E:45:22
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 0198D4A7C47A71B4765140E22D984314623A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 120C
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: TznoFzJzsggcbRC2tePAKAiGqHBvyibdEESRIBfaYXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c4:7a:71:b4:76:51:40:e2:2d:98:43:14:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=6b217b33cc62bd0f197601d96637fae64f2e4522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:0b:c9:40:00:15:38:b9:66:10:0b:d7:37:
62:80:df:c1:2c:e5:27:5a:31:4d:63:e3:ae:d4:71:
22:3b:e7:13:7c:16:73:c9:4c:67:fc:8c:d1:3c:aa:
46:d8:ad:af:23:1c:58:79:a8:44:7f:c9:ed:f1:9a:
55:0c:8c:f4:81:c7:f7:8b:40:af:43:43:fd:6f:8d:
d7:94:ef:0d:e3:14:1f:d5:06:32:ea:fb:1d:21:a6:
5a:cd:51:62:9c:b9:14:81:ed:ce:a3:ab:30:02:40:
3d:32:c9:da:ca:ef:68:c8:e3:38:6f:65:81:17:82:
ae:1d:17:b2:dc:0b:a2:60:13:5f:11:ba:c4:03:e6:
b7:03:33:34:54:6f:e2:0a:8b:95:8f:f0:bf:07:bc:
1d:31:c2:3a:cf:5a:75:53:e8:58:2b:8a:85:c6:10:
35:8d:99:7c:40:d1:24:4c:34:39:76:43:79:4b:99:
47:00:dd:c0:1e:07:db:b4:06:92:44:3f:04:f8:37:
f1:64:50:1e:fe:78:fb:d8:a2:eb:28:53:a7:12:97:
ae:4e:93:a4:87:0f:ac:b1:38:c0:e8:5b:05:f3:75:
d0:38:bf:e8:fa:60:78:05:8b:36:5d:b8:ba:31:24:
fb:2a:b5:71:55:4b:50:65:7c:a7:38:94:82:fd:ca:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:7B:33:CC:62:BD:0F:19:76:01:D9:66:37:FA:E6:4F:2E:45:22
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:31:28:b9:e7:03:33:9a:c1:c3:4a:83:ff:18:60:e5:0f:69:
11:60:c2:70:b4:8d:65:81:d8:d3:4c:9a:0d:b8:d2:81:37:34:
10:11:76:6b:ed:31:30:92:00:3a:cb:f4:20:8e:58:87:5e:7c:
3a:2e:fb:7e:ec:94:0c:75:f6:d3:3e:8d:0b:bd:e6:a6:9e:01:
b1:03:2a:51:19:32:2b:f6:07:31:3a:bd:a8:b1:bc:94:e1:b3:
9a:32:34:b5:69:d6:1e:92:6e:5c:68:32:d5:92:cf:4a:ec:26:
50:09:e8:f0:34:dd:4c:56:ea:09:30:51:7e:2a:8e:75:d2:c7:
72:d8:66:41:65:9f:3d:81:06:9b:b3:f5:38:c0:a5:2c:9e:61:
d1:22:85:e9:af:3f:43:d4:bd:92:d6:b7:0d:3e:77:b8:f9:3d:
ac:d9:cb:43:79:9b:07:fc:7a:bd:cf:62:6f:ba:14:0d:ca:2d:
48:49:8e:01:93:0d:5d:15:52:ba:62:f6:8f:af:b7:ff:2a:8e:
85:f4:1b:f0:e0:b9:70:0e:bf:e5:63:57:da:71:ee:34:8f:5c:
18:c6:60:c9:dc:26:7d:8b:d6:aa:89:ca:b3:47:ef:98:6f:7d:
7c:f1:0a:ea:81:60:6d:9d:fe:70:b2:db:6f:aa:1b:0f:ab:26:
74:34:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:56 2025 by rpki-client