Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: +XZhH/43RTlpGRhQ6vdwPqx761gd8cYIZ6ar5lE2jrc=
Subject key identifier: B4:74:69:90:43:C4:00:94:31:CA:40:CA:9B:BD:87:54:48:9A:26:27
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 0198D7061120C74FA7FF565034D196D52AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 0570
Signing time: Sat 23 Aug 2025 13:02:35 +0000
Manifest this update: Sat 23 Aug 2025 13:02:35 +0000
Manifest next update: Sun 24 Aug 2025 13:02:35 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: BtvjqQK5rzVNtCT9G9gUdUpTnysmfgiqVtwDzDWbdVk=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:11:20:c7:4f:a7:ff:56:50:34:d1:96:d5:2a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Aug 23 13:02:35 2025 GMT
Not After : Aug 24 13:02:35 2025 GMT
Subject: CN=b474699043c4009431ca40ca9bbd8754489a2627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:6e:49:fd:ae:20:f5:51:d8:57:50:7e:11:
49:62:1d:fe:a7:0b:bf:7e:90:37:06:5a:31:db:eb:
b6:90:63:85:5b:d1:4d:e0:d9:27:c9:cc:5e:df:0a:
7c:be:27:4a:c3:66:ee:ac:2b:64:ff:8a:b9:0f:e3:
b3:59:2b:c1:3b:5d:e9:34:37:78:70:51:13:33:9f:
3e:5b:be:fb:ea:bd:ea:5f:6e:86:28:0b:04:f9:d4:
64:c6:9b:b4:34:73:d6:3c:fa:fc:a1:d1:e5:bb:e6:
3b:05:70:dd:2f:19:f6:39:97:1d:d7:31:4c:48:fe:
c7:22:f5:c4:44:2c:b3:b5:84:91:18:49:62:1a:7e:
c9:f2:54:b4:a7:88:15:4b:1c:2a:18:4c:d6:17:fa:
c1:a2:b0:bb:4c:91:b8:97:ec:39:1b:8d:d6:f8:74:
76:e7:49:90:27:bd:21:2d:fe:23:b0:f0:6b:1e:62:
cb:5b:e1:97:7b:aa:a5:91:e5:a8:b5:b8:b9:eb:38:
9c:6c:28:3d:8e:30:a7:05:36:65:64:24:ee:3a:a7:
81:cb:cd:0f:02:39:10:b8:4d:37:9c:22:41:2a:1b:
52:b7:b2:18:8f:78:50:9d:51:48:17:d4:84:31:9c:
bf:79:36:dc:21:2b:82:78:38:93:c9:9c:08:5f:d8:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:69:90:43:C4:00:94:31:CA:40:CA:9B:BD:87:54:48:9A:26:27
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:13:eb:6b:34:35:3b:d2:ec:54:7c:12:d7:ce:81:fd:58:
9b:a7:e9:ef:b0:e0:71:32:8e:93:d9:7f:ec:86:32:a8:70:d4:
4f:2a:9c:a1:d9:34:82:f1:16:38:ba:4c:99:28:f8:c5:9e:a2:
b1:c9:c2:b1:74:d3:95:87:53:03:bd:84:9e:af:b2:6c:88:d3:
66:df:88:4c:09:b5:89:56:38:f0:60:0e:c7:d6:05:54:a0:2b:
eb:7c:42:bb:dc:b2:17:4b:a1:aa:3e:a8:13:7d:a4:9a:09:b1:
02:83:90:7b:c9:e8:52:91:d1:27:30:b5:79:10:ac:c0:c0:0f:
98:d6:bf:1b:3d:86:78:8a:ac:b4:10:9c:0b:04:62:06:97:64:
bb:59:03:4a:39:c1:49:f1:fc:33:bd:10:40:56:ba:2d:57:d2:
c5:36:f0:fe:06:dd:5a:05:01:0d:9e:64:56:41:18:d5:de:e1:
61:f8:9a:e3:36:53:2a:cf:d4:2c:02:4f:4f:f5:74:06:ea:55:
d6:9f:69:08:4d:7e:70:24:b9:00:96:84:76:d3:82:b4:02:7b:
35:d8:87:80:83:5a:1b:cf:73:53:93:72:c2:23:c7:0e:17:6f:
01:28:9b:db:1b:cb:50:a8:8c:45:04:c2:04:a4:45:e3:02:16:
87:da:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:56 2025 by rpki-client