Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File: kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier: IRj7jVQjhPipqdK/GR3QUsWhyjYFO1gG+TjmT37aebY=
Subject key identifier: 9B:EC:22:58:43:33:14:E3:41:F8:2B:32:BD:35:3A:BC:6A:B8:98:9F
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer: /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial: 0198530E6502B20AA5B07FF1892DD036B3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number: 95
Signing time: Mon 28 Jul 2025 22:01:48 +0000
Manifest this update: Mon 28 Jul 2025 22:01:48 +0000
Manifest next update: Tue 29 Jul 2025 22:01:48 +0000
Files and hashes: 1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: SViCS/UHj9HICxNVtD+A5Ko1jga1eQdfxggpAu2jfqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:65:02:b2:0a:a5:b0:7f:f1:89:2d:d0:36:b3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Validity
Not Before: Jul 28 22:01:48 2025 GMT
Not After : Jul 29 22:01:48 2025 GMT
Subject: CN=9bec2258433314e341f82b32bd353abc6ab8989f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:4b:6c:9e:78:6a:48:5d:a4:3d:c1:86:60:
b9:32:a3:43:17:b7:93:77:1b:11:9c:35:2d:18:f6:
29:d5:27:7f:32:cd:09:3f:d7:dc:e1:b9:cd:91:57:
14:96:8a:ef:c7:12:d0:30:72:6c:32:ae:06:2c:67:
8b:dc:d7:02:8f:44:ae:7c:19:74:d2:14:e0:96:48:
05:4d:42:5d:5d:ac:6b:71:81:db:cb:b5:8b:8c:fa:
40:e3:c7:a6:84:ea:35:b6:2c:78:48:ab:69:5c:8e:
45:76:f8:62:0c:73:0b:7e:b3:1e:1b:35:67:fe:01:
51:6e:c4:0d:83:34:01:8a:57:27:e7:ac:31:02:d7:
2f:49:41:b1:61:6e:e2:2e:ea:7c:73:52:81:01:0d:
2e:08:a5:b8:84:cf:71:52:21:04:eb:b8:7b:67:47:
06:1b:e6:f5:96:54:9c:fa:fd:f1:0a:60:81:20:b2:
ba:6d:9e:fa:4b:72:72:ce:93:34:b8:61:8f:7f:d8:
4d:73:85:69:57:d6:fe:54:9d:44:88:6b:ec:b4:8a:
f3:8a:3c:81:a6:62:43:6f:82:a8:24:28:f2:cb:eb:
32:be:bb:6d:b8:21:1a:fe:36:ad:7d:3b:db:2f:13:
1a:39:c9:dc:81:6a:0b:af:aa:4d:1a:9c:e6:7f:d0:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:22:58:43:33:14:E3:41:F8:2B:32:BD:35:3A:BC:6A:B8:98:9F
X509v3 Authority Key Identifier:
keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:77:a2:c6:55:fc:eb:06:b2:ec:ee:6d:51:c4:c8:45:bb:d7:
b1:96:c7:a6:1a:89:06:56:9c:49:bd:21:84:d6:83:e8:74:23:
c5:21:41:e9:ac:c4:9d:49:37:50:b3:47:75:cc:01:d9:7d:79:
8c:22:18:4e:3a:6d:fe:66:4f:55:fa:3b:33:b2:ba:26:0b:38:
40:bb:53:d8:36:cd:62:12:63:f3:54:bf:23:4c:6a:8a:97:9a:
73:46:8a:b4:df:e2:42:19:33:83:f4:cb:93:45:b4:ab:df:39:
cd:90:37:7d:32:ed:06:7b:38:0a:81:25:4b:3e:0b:aa:81:54:
17:22:b2:e9:8f:56:68:85:a2:43:fb:07:53:42:53:1b:fc:4b:
74:cc:6a:30:37:6f:15:11:dd:ab:b1:e4:94:3c:ca:1c:80:78:
23:5d:26:be:3f:76:13:97:6f:00:93:8c:05:03:c6:16:28:f7:
a3:99:b3:1c:0f:d2:ad:7d:08:6c:7f:cf:4c:51:f9:07:33:6e:
7b:2e:ba:f7:89:a3:28:d9:07:c7:4b:2e:b8:70:ce:9f:27:0b:
6f:ef:83:48:b1:40:42:fe:bd:a8:f8:47:f4:04:f0:cd:05:96:
13:81:42:88:b3:bb:93:24:5f:b9:2c:73:12:87:d4:aa:62:60:
aa:be:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:42:23 2025 by rpki-client