Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: a2VX3Nted6OcX1EdwyV8AW3tGPSLXto09tujH1S8gh0=
Subject key identifier: B5:3A:BF:9F:13:78:9A:CF:93:F9:41:8A:59:26:5F:7A:B5:C4:23:8E
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 0198D54E856E890A8D36F061A61014026129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 09BB
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: joPj+uWZpzTI2gwrHCjVzt/mFeh7WosIdCrYDAr/H/4=)
2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:85:6e:89:0a:8d:36:f0:61:a6:10:14:02:61:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=b53abf9f13789acf93f9418a59265f7ab5c4238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:43:22:1c:77:a9:2f:0e:a8:a8:24:c8:68:
ed:6e:3b:f5:46:67:64:50:26:38:e9:0f:60:10:99:
de:2d:9a:c9:38:3c:52:b0:dd:5e:ff:72:bf:09:ba:
37:bf:fd:21:22:ca:8a:d8:9f:8d:76:46:8b:a3:3a:
e0:0f:e8:ca:cc:0a:32:2c:ed:84:c3:a5:00:28:a7:
df:1e:8e:e6:a8:ea:e3:b3:73:6c:6a:eb:c0:1b:da:
e5:6b:fa:e7:71:ab:26:f6:27:3e:05:03:8d:13:76:
c5:ba:46:10:1e:bb:d6:dd:a9:52:73:b4:52:d5:d3:
14:85:df:7a:d1:d7:3f:fa:df:61:01:7b:6a:30:20:
9b:04:44:d7:01:44:b1:6d:b2:00:03:47:4c:be:8b:
ea:39:e6:a9:32:92:ca:08:30:5c:33:f7:bc:eb:99:
8e:2f:5a:4e:ab:64:54:ed:12:d3:6f:43:b0:79:8e:
13:40:f2:95:f3:d2:46:f3:bb:07:a0:8a:b7:aa:e6:
c1:a7:65:16:78:6c:0f:7f:38:bf:3a:c5:18:f0:fb:
37:53:fb:02:b3:bc:ab:76:7c:91:55:60:d3:ac:55:
22:ab:0d:a6:af:6b:c5:a3:ba:3d:26:a9:75:04:a5:
c1:f4:7f:97:71:32:61:64:17:2a:c7:a0:7d:a4:ca:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:BF:9F:13:78:9A:CF:93:F9:41:8A:59:26:5F:7A:B5:C4:23:8E
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3c:87:fd:9c:39:98:aa:6b:46:16:64:4d:8f:d2:4c:6b:4e:
75:07:dc:59:ad:c4:93:d8:0f:b1:c6:a0:c5:ea:72:92:e5:90:
40:b5:f6:37:10:0a:76:f1:2a:83:bb:fa:c4:a0:fc:33:1f:2a:
45:ff:21:0d:da:de:1d:a7:4c:09:06:30:d4:1f:3c:59:89:14:
ad:d4:70:a5:47:eb:40:e8:6b:b7:66:ae:02:f7:14:70:78:ca:
0f:e3:dc:a6:e8:78:a8:f1:94:35:ab:d0:fd:c1:9c:c9:16:cf:
5c:70:4b:80:d8:f9:ba:c7:e8:05:b0:b8:8e:9b:b7:0f:18:04:
de:dd:89:52:4d:3b:d6:70:8d:9e:46:6c:43:52:b6:1e:05:d8:
78:87:7d:4e:c5:97:19:77:00:58:7a:81:86:e5:50:e6:85:54:
46:fa:df:b8:45:51:13:af:32:d1:11:be:bb:51:a4:91:64:b9:
ce:b3:9c:f7:ff:a4:8e:2d:19:d9:0c:2f:5b:b9:92:b2:2b:92:
84:d5:4d:c2:4d:8f:f8:d3:0f:8c:20:3a:a2:5c:6f:a7:c6:f5:
d9:89:c2:fc:3d:47:fc:36:71:ab:b1:27:8d:a6:99:cf:81:8b:
9c:b5:b2:b1:5c:ac:1a:ed:a1:42:22:e2:d7:cf:a5:e3:71:19:
21:4c:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:16 2025 by rpki-client