Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
File: kbP11vQ-gwcfp35tPru3k1L5YbU.mft (raw, json)
Hash identifier: ixQDkm1Z1+1PQU7c5JnnveFYpYlrjeq9f2R9XALetP0=
Subject key identifier: 2E:8B:19:9C:64:E7:4B:14:C7:74:7F:5E:29:B7:5F:50:95:07:E8:DF
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 0198D4A7F614E1AA8AF93538E773FC562725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
Manifest number: 0F26
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: X8wL7IEItggqG87hU2SRjhDFo0c.roa (hash: Z7Uz5pUQbhyO7q39OnET5F24kmKZzxNrZzpSD8G3ebQ=)
2: kbP11vQ-gwcfp35tPru3k1L5YbU.crl (hash: 61niQD51dZNrG9DxUAHp0UIu4n4cE9BCr8NGFySDc6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f6:14:e1:aa:8a:f9:35:38:e7:73:fc:56:27:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=2e8b199c64e74b14c7747f5e29b75f509507e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:87:cb:58:3a:31:8e:b0:a0:75:ca:13:b6:
d4:a8:54:34:d1:b9:8b:b9:66:20:e3:4b:51:58:f3:
2d:fa:79:95:09:09:b9:37:0c:65:68:20:ff:68:d4:
cf:f3:a6:95:17:a5:a8:3c:73:b8:9c:82:4d:fb:47:
6a:f1:5c:db:ef:f4:73:04:4f:6b:ac:07:23:df:72:
aa:7f:5a:e6:ba:4e:5f:58:fb:78:4f:8d:5f:49:2f:
c2:d8:5c:95:d9:63:fd:ad:45:a8:3a:2f:b9:9b:03:
22:15:1d:56:7f:a9:d1:63:de:29:e1:9b:b6:71:76:
1d:1e:9f:b7:4d:74:fc:80:97:39:7c:5a:c4:e4:2b:
53:a6:c7:30:01:ce:fa:d8:29:ab:92:6a:06:b8:9b:
cc:2c:59:f5:82:62:58:61:b4:9d:88:9c:96:da:3f:
a6:78:fd:74:59:59:cb:19:57:c2:56:38:f6:84:d9:
9f:c7:d0:73:96:42:2a:5f:20:95:85:91:eb:73:e4:
d1:2c:62:e8:ca:25:8c:d6:ef:99:c5:2c:2a:83:51:
b9:f0:ad:3b:ca:54:bc:7e:c6:80:dc:5b:00:c7:cd:
a1:51:fb:31:31:af:68:d2:2e:2d:b0:54:ba:c7:be:
a2:92:df:4b:17:7d:f2:06:9d:ce:63:2b:ef:a4:a2:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:19:9C:64:E7:4B:14:C7:74:7F:5E:29:B7:5F:50:95:07:E8:DF
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:8e:a9:39:5f:c4:59:b8:ea:f7:23:df:51:c1:0b:c6:8e:
4e:55:46:b4:0c:2f:4d:b2:10:f6:6e:89:22:df:05:91:9a:85:
68:df:c7:65:bd:45:b7:86:6d:41:4b:1f:ab:69:10:2b:c4:81:
a6:c4:b1:95:f2:e1:12:0b:91:06:51:84:e0:bd:a3:11:04:89:
20:21:4b:08:2e:8a:ad:be:06:1a:bd:e7:a6:8b:84:9c:9d:c1:
67:26:19:ab:94:2a:76:56:52:c5:66:92:d2:7a:3e:5b:04:a5:
1e:dc:61:d0:76:8c:56:77:6e:80:83:8e:33:a9:30:72:5c:be:
6f:a6:12:d1:2d:ae:3f:49:84:44:c3:cb:49:f7:85:b6:33:e2:
bf:df:fa:65:e1:25:8d:96:79:3e:38:87:f2:8d:c5:b7:66:65:
50:6b:27:99:64:f4:01:ba:c1:08:8b:4c:e6:ec:4a:45:34:ac:
86:a3:bd:6b:0a:29:7f:ad:e7:07:b1:ed:a7:09:6c:07:2a:99:
0d:1e:b4:12:0a:b8:78:1e:56:ec:c1:d2:59:ea:a0:db:4b:07:
7f:18:29:2e:64:ae:b2:12:0b:c9:cc:01:5d:77:58:35:5e:31:
36:56:98:6d:c0:63:b7:d3:b8:6e:c5:da:48:cf:8b:04:48:06:
20:15:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:26 2025 by rpki-client