Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: B5l7MKeAvQPS5EueOCdNiARpgiOsNDk1gpWfmPK2jo4=
Subject key identifier: E1:11:7D:EE:E6:D3:D2:0E:58:CB:EC:CE:84:A8:90:0F:F5:66:5E:B5
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 0198D4E0676789B4D392824C1A49DB01A263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: +a8ZyPZ94lQ9TzctyRVAbLnmsZ1H0F/bl6gX8Dsinps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:67:89:b4:d3:92:82:4c:1a:49:db:01:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=e1117deee6d3d20e58cbecce84a8900ff5665eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:4d:97:3f:1c:1c:ce:97:e2:7b:c9:dc:3e:
36:f3:14:db:32:97:be:94:d8:ea:25:18:4a:74:94:
f5:97:a3:f0:db:84:dc:10:72:5f:09:86:96:9f:80:
29:0e:24:46:65:a5:cc:00:15:2f:1c:c2:fb:54:d5:
56:34:67:be:9c:e6:21:ce:a8:04:1f:dd:75:9c:9a:
73:a4:b9:b8:c1:45:2b:05:dc:fa:6c:ee:49:14:6d:
08:33:8f:0f:b9:7e:96:bf:9b:7c:31:78:3f:0d:92:
83:05:41:d8:bb:2c:7c:e6:ec:67:ab:28:67:70:84:
9d:53:c3:f6:05:34:bb:86:c7:0b:04:4f:92:8c:b5:
ef:2c:fb:7d:f9:1a:82:47:2b:95:01:92:d9:e4:91:
86:fd:2a:85:65:fc:e5:12:35:d1:1c:f0:c6:0d:00:
ce:79:91:f3:7f:df:8a:64:88:9e:64:5f:1b:58:f8:
d3:2e:cc:92:b8:d6:5a:11:f2:ca:be:b9:55:a1:4c:
4f:5b:36:79:40:79:0e:f8:1b:7f:2e:95:3a:c1:6f:
74:4e:4f:0f:ef:9c:8d:f3:56:46:10:a7:97:c9:9c:
ae:3f:04:1a:56:ab:84:54:48:31:37:39:9c:c8:53:
f2:9e:46:2b:c4:16:04:f5:10:27:50:cd:27:f4:d8:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:7D:EE:E6:D3:D2:0E:58:CB:EC:CE:84:A8:90:0F:F5:66:5E:B5
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:ad:02:59:11:83:c3:d9:48:53:d9:66:a3:ef:ff:1a:38:
6e:23:96:59:7b:a2:85:7f:d4:8c:28:70:98:c6:18:6c:57:2b:
22:ae:ef:a4:28:61:5a:71:02:bc:52:d9:f9:f4:5c:55:be:75:
ae:23:51:b5:f2:98:de:ea:3f:59:df:8f:92:80:bc:94:f2:34:
43:b3:ec:b9:8f:83:48:ef:18:d6:a3:5c:83:03:bf:44:b9:69:
64:8c:93:12:54:be:ba:2f:1b:34:33:3e:e5:63:5a:1d:91:a8:
1c:0d:f4:19:35:2f:80:ec:8d:fa:49:4c:c5:d3:82:c3:16:32:
2e:b1:ea:07:dd:46:06:4d:e5:2c:d5:cf:2f:c1:81:17:f1:e5:
6c:c8:bc:b6:2e:37:e5:04:5a:1e:2d:a1:55:cc:48:95:d1:14:
20:14:78:e5:52:c2:64:85:fd:47:af:f9:27:21:d8:a3:65:0b:
0d:31:2f:85:62:35:69:27:f5:a2:66:51:b1:de:d5:54:b4:ec:
5c:80:d9:d9:c2:93:99:cf:f2:aa:e6:65:47:45:0a:52:78:d8:
af:99:87:ee:b3:16:4f:99:94:86:b1:a1:d5:03:df:2f:04:78:
4e:07:09:5c:18:4c:1b:9a:c3:03:b8:04:c1:99:85:71:45:7f:
9a:ee:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:06 2025 by rpki-client