
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: jNfSbrWtb6gIuJ3+bjqzdaH900wDYAtoDs8XTXu9V1c=
Subject key identifier: 11:7F:6F:1F:C0:AA:35:34:FA:32:D6:B0:3B:E5:B1:34:D5:0B:71:62
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019844764C2DD7DABA722BA61F8F8DFD73CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 133E
Signing time: Sat 26 Jul 2025 02:01:00 +0000
Manifest this update: Sat 26 Jul 2025 02:01:00 +0000
Manifest next update: Sun 27 Jul 2025 02:01:00 +0000
Files and hashes: 1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: +ownuxted+xFWiflDExdTzhjwrzPnD4JyEuwZ62SSmw=)
4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:4c:2d:d7:da:ba:72:2b:a6:1f:8f:8d:fd:73:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jul 26 02:01:00 2025 GMT
Not After : Jul 27 02:01:00 2025 GMT
Subject: CN=117f6f1fc0aa3534fa32d6b03be5b134d50b7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:4c:99:9d:27:3c:2b:19:dd:6c:62:b9:9b:
2a:49:f6:62:15:ec:29:1e:fe:9d:c9:ac:07:10:72:
d4:d2:6d:be:91:a3:59:c9:e6:47:04:4a:cc:f7:c1:
f3:1d:af:ea:48:86:db:09:66:68:6e:7d:df:d8:bd:
90:d2:d1:6a:74:bb:07:9c:77:d2:27:6c:81:39:b5:
ff:3f:4c:ed:14:b4:1d:a0:bc:74:59:d1:58:f0:4a:
f7:bc:0a:cc:8b:fb:26:33:9c:0a:59:83:77:b4:57:
1d:2b:7c:f0:f5:57:3c:2c:0a:ab:8a:8f:a5:b0:31:
ca:cb:c1:75:29:38:f8:fc:64:17:8e:18:e8:57:95:
b0:1a:15:f7:0a:17:0f:f9:96:67:f9:96:53:e2:ea:
e6:93:c2:d4:58:e3:01:da:4b:07:38:74:ac:9a:8e:
53:27:d7:86:15:fc:2b:ba:9b:44:69:41:96:4e:e0:
ac:70:7b:79:d5:70:bf:8f:1d:63:62:1e:d0:6b:7e:
df:f6:7e:7e:dd:d4:bd:06:0b:bb:f3:61:f7:f1:97:
d8:0e:48:6c:fc:3e:fc:6f:24:47:27:9b:10:4a:02:
28:a1:9e:eb:c3:28:a9:5f:0d:e0:3e:a3:68:46:13:
e2:2a:a3:70:3e:8f:0e:77:e7:89:6e:6d:66:e9:43:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:6F:1F:C0:AA:35:34:FA:32:D6:B0:3B:E5:B1:34:D5:0B:71:62
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:16:5d:94:1e:f0:4f:0c:cc:6c:4f:c8:0e:00:74:09:14:8a:
ac:39:2e:15:90:c4:a4:d3:b0:7d:65:aa:97:e7:cd:e1:22:eb:
64:74:ca:92:ad:d1:75:e3:fa:4e:ac:45:d9:15:1a:fe:63:71:
6a:99:3c:9a:b5:03:54:81:67:3f:19:64:d4:5b:67:2e:0c:a2:
41:71:38:eb:46:a3:d3:67:66:42:ca:9d:4e:5c:2c:c9:38:82:
0b:9b:61:83:40:6b:9f:16:0b:02:3c:a1:b1:39:79:f6:4c:94:
22:1d:c3:42:40:24:96:d7:2a:fe:d2:4b:32:d4:de:23:c3:4a:
85:e9:b1:0b:7b:cd:df:c5:55:42:79:34:91:4c:3f:e9:76:a0:
1a:e9:97:1d:4a:63:fe:e1:0b:c9:c5:35:80:68:bb:3e:20:83:
78:da:8b:ce:6d:74:83:87:92:8d:8b:19:9e:72:70:d7:85:b0:
8d:a8:7a:d9:a9:98:68:5f:2d:d6:a4:84:fd:ae:7f:43:a9:6b:
72:8d:fe:44:f7:06:58:3a:c8:b9:ff:b2:db:d2:78:a4:16:10:
62:a2:fa:e9:72:8e:1c:07:ab:92:23:ed:88:83:56:53:81:50:
c1:82:88:e1:eb:f7:1b:e2:23:d9:6f:87:30:f6:df:29:f4:2b:
c9:ad:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:52 2025 by rpki-client