Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: WjlE+vGonhCzQJT67by0epYOW0bXVZPMN5UeivxvEYU=
Subject key identifier: 21:E5:5B:AD:17:83:1F:A1:B8:71:A6:2E:E3:AC:2C:C4:DB:21:B1:B0
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 01984AE5ED61D7662FEE4B5C37BCB456E535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 086A
Signing time: Sun 27 Jul 2025 08:00:39 +0000
Manifest this update: Sun 27 Jul 2025 08:00:39 +0000
Manifest next update: Mon 28 Jul 2025 08:00:39 +0000
Files and hashes: 1: BJ4VFOskRK3bBiJBpHiT_tAzA5A.roa (hash: UXn6LX6IgvE9frtcP3dcRwG57JPhrEUAXhgX1T/Y+PE=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: H7yX4Ve9cQza3qIHeoNviV1cplpUvmd9bl1fKvzGEro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ed:61:d7:66:2f:ee:4b:5c:37:bc:b4:56:e5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Jul 27 08:00:39 2025 GMT
Not After : Jul 28 08:00:39 2025 GMT
Subject: CN=21e55bad17831fa1b871a62ee3ac2cc4db21b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:f9:8c:26:5e:23:d3:03:02:d3:22:79:b6:
d6:e1:db:1f:b7:9d:00:bf:0a:58:b7:94:32:ee:4a:
48:2a:78:2d:ce:d0:88:29:29:5e:ed:b2:55:79:de:
9a:be:5a:56:cc:4f:73:9f:ca:6b:a2:17:bd:f0:f4:
5f:6a:83:f1:9a:81:ac:58:81:d6:a1:8b:50:bf:79:
67:53:85:ce:10:64:9c:bb:26:63:44:b5:16:07:94:
9c:de:3b:66:cd:d2:28:cc:3c:fc:64:fe:86:82:0e:
85:51:10:10:b9:74:e0:49:9a:f7:1d:e7:ef:3c:af:
3a:22:99:60:20:10:b8:df:9a:48:8c:75:84:b6:d0:
b6:68:46:04:24:9a:6f:ae:4f:2c:ed:1a:37:2c:d1:
dd:e6:b3:be:ad:35:e8:bf:4c:f8:3d:00:75:db:2d:
73:eb:41:6d:6a:52:11:00:29:65:9a:94:d7:3e:fd:
04:19:a6:ad:1e:cf:3c:0c:83:d7:8a:16:72:5b:3b:
aa:ba:41:55:d9:bb:a0:0c:be:7d:de:b7:7d:a3:dc:
10:66:0b:10:b0:91:12:3a:ba:19:57:3a:f1:1e:a6:
7d:69:c4:b7:47:94:79:dd:6f:c1:0d:5e:4b:c6:94:
56:d7:f7:be:9e:29:52:50:cb:86:ad:b5:6c:53:33:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:5B:AD:17:83:1F:A1:B8:71:A6:2E:E3:AC:2C:C4:DB:21:B1:B0
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7b:f1:cc:a3:99:3f:6f:0c:d1:c4:a3:4d:52:f1:da:a8:dd:
8e:d7:84:f6:c7:d7:0e:28:bb:3a:64:fe:74:01:44:99:5c:d4:
4f:34:0f:ac:59:b4:7a:5e:6f:24:41:43:d1:26:ce:3c:63:7a:
b3:eb:42:76:20:99:10:55:5d:5c:4b:67:e6:4b:8c:b0:65:1e:
d8:67:8a:5b:95:25:25:80:52:f8:5d:da:55:58:5c:50:48:ec:
71:64:72:a9:ee:88:98:19:31:b8:1e:6e:49:fd:b6:13:f6:e4:
7d:0b:20:f5:46:ba:a5:ee:fc:3c:74:54:16:1d:ad:07:f9:ec:
08:2a:bd:33:82:b3:e0:c0:c7:72:b6:8f:08:5e:e7:8b:31:10:
c0:91:fb:1e:fb:12:2f:ee:83:22:95:cc:bc:a0:e3:c0:15:4d:
bc:63:58:6c:11:1f:af:67:69:5d:a9:d2:3b:a6:c1:ca:88:a1:
8f:c5:10:20:a3:f1:6c:5c:fa:ec:9f:43:17:7e:b1:fe:7a:bb:
02:d8:58:17:cc:09:5e:f8:c2:27:4f:4e:46:8d:71:84:17:9d:
c9:44:f2:04:f0:1a:99:ac:9b:29:01:9e:58:0c:a5:5c:1d:58:
c1:83:8b:3c:a1:ed:9d:9f:77:5d:62:4a:c3:5f:39:7d:8f:71:
22:54:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:00 2025 by rpki-client