Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: gss0QdPXann83LAw7meG5HpRKIPKxy3ihMKlFHEBbKI=
Subject key identifier: B1:8B:39:81:26:F2:5E:DE:78:8E:6F:B4:0E:58:66:86:C6:2E:7B:8A
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 0198D6CDC9D07C7FF5FA02991BC02AD4CD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 05F5
Signing time: Sat 23 Aug 2025 12:01:07 +0000
Manifest this update: Sat 23 Aug 2025 12:01:07 +0000
Manifest next update: Sun 24 Aug 2025 12:01:07 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: LQOcicccKV5RW19ZkuGUCJxxz6IUcWb1TeXdO+B0RZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c9:d0:7c:7f:f5:fa:02:99:1b:c0:2a:d4:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Aug 23 12:01:07 2025 GMT
Not After : Aug 24 12:01:07 2025 GMT
Subject: CN=b18b398126f25ede788e6fb40e586686c62e7b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:eb:6d:81:f2:14:6f:10:f4:6a:7b:a6:46:
bf:6b:51:19:45:35:34:ba:62:83:51:ae:04:6f:2f:
71:82:8b:71:eb:7f:10:2b:02:3a:bc:0c:d0:a3:60:
5f:d6:29:80:ae:1b:de:c4:e3:68:38:d3:f2:c3:69:
db:74:75:e5:a0:ce:15:71:bb:b5:d0:69:22:9c:dc:
69:df:2c:1f:9d:f9:28:ea:b9:34:a8:b8:5c:bb:90:
ee:9e:1c:d9:2c:cc:0f:4b:78:e7:17:9c:7d:ef:12:
cb:eb:52:43:c9:bc:be:bc:43:09:a2:27:b6:1b:18:
7f:ae:90:a4:91:89:56:3f:76:f2:39:7c:29:0b:b9:
57:b1:7f:cc:bc:5d:4b:ce:38:46:b2:9b:2e:62:c4:
88:8e:90:22:ff:21:8b:bd:ea:be:d4:f8:74:a2:4e:
e3:d9:56:e6:00:d4:bd:2e:a0:c1:cd:c0:8f:76:69:
e1:05:24:bf:aa:f4:c0:5a:c4:13:6f:b9:cb:5c:71:
63:2a:ff:70:70:39:5c:61:6b:72:87:35:3c:49:5b:
fa:36:b8:33:08:47:fe:37:7a:78:cd:71:bc:8c:90:
c0:67:5e:14:e7:bb:29:cc:2f:12:cf:43:bc:f9:c5:
f6:7d:7d:0c:07:5a:32:e5:d1:f0:45:e5:e8:2b:b0:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:39:81:26:F2:5E:DE:78:8E:6F:B4:0E:58:66:86:C6:2E:7B:8A
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e1:4f:a6:98:7e:c1:5b:47:a5:e2:ea:6a:74:fb:d5:df:21:
0a:e0:bf:30:5e:15:f6:76:c7:06:a6:15:3e:98:8e:12:53:08:
6b:d0:3f:55:ad:59:1e:20:95:c1:1f:be:0b:32:ca:4a:f2:e1:
72:a6:d9:69:b1:39:4a:f1:3f:8f:7c:ac:20:2e:83:7d:38:56:
53:56:68:92:e7:2a:7c:26:c5:7f:84:f0:ac:78:97:62:86:05:
45:57:1d:30:2a:72:c4:9a:94:6a:04:ad:a1:d6:dd:fc:2a:c1:
2b:f3:05:08:ae:d2:37:6c:f8:70:cf:9c:3a:39:b5:da:fd:59:
03:95:f8:18:af:5b:dd:a8:cc:bb:b1:e8:54:9f:e7:9b:55:a9:
e4:6c:ea:76:a1:1a:c0:7c:5d:e1:44:4c:2f:00:4d:06:b7:2a:
80:48:b4:54:c4:7f:a9:61:dc:74:84:09:34:63:21:4d:5d:68:
30:0c:e2:33:bf:0d:63:b7:4f:d6:fa:4b:c9:b9:90:b8:ef:46:
91:27:b6:58:74:0d:09:4b:f4:e3:ec:5d:34:ce:b2:5b:43:3b:
d3:ac:59:19:dc:f1:29:9e:cf:9d:07:ba:73:80:51:3e:db:74:
d8:17:bb:f5:38:49:89:fa:0e:33:fe:05:f1:ae:ff:21:d9:eb:
50:76:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:23 2025 by rpki-client