Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: EN2qKNDB0dIHpEYiOKMcd+idr47Oca3orR5yKgVbpOY=
Subject key identifier: E7:F9:DE:3B:18:5B:97:6F:A7:B6:F8:1E:9D:0D:22:3B:EE:F8:60:35
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 019864A5B6FADFA0C63E02F04A383E4DA795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1610
Signing time: Fri 01 Aug 2025 08:00:38 +0000
Manifest this update: Fri 01 Aug 2025 08:00:38 +0000
Manifest next update: Sat 02 Aug 2025 08:00:38 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: B4xcJ7IjQ23p48CTjAH+HSlEip0LvMXVBAtTKpyRpJM=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:a5:b6:fa:df:a0:c6:3e:02:f0:4a:38:3e:4d:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Aug 1 08:00:38 2025 GMT
Not After : Aug 2 08:00:38 2025 GMT
Subject: CN=e7f9de3b185b976fa7b6f81e9d0d223beef86035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:62:f2:18:5d:a8:aa:34:d2:4a:e8:1a:2c:
b0:a7:ef:49:6f:46:93:1d:dd:d3:61:5d:1f:0a:e2:
37:2f:f9:f9:59:29:fd:0e:d3:ea:63:0d:72:a7:fe:
58:cd:2b:ba:93:63:49:b9:ed:0e:99:59:7d:b1:a9:
3d:6b:e5:b6:e7:79:c0:22:22:74:ba:cd:be:a3:ac:
70:ae:b2:d9:a0:29:22:0e:5e:28:cc:d3:cc:8f:e9:
9b:80:4b:f2:9d:6c:63:72:b5:1e:6e:93:3e:27:2f:
24:e2:bc:5f:91:21:d0:3c:1f:a2:3c:06:09:b1:52:
bb:47:2b:b2:1a:3f:b3:29:16:93:5c:4e:65:34:94:
64:fc:11:82:2f:13:64:50:b5:76:ac:72:a7:ba:5a:
5e:e6:81:be:89:9a:9e:1e:d1:d7:08:ef:c1:a7:4e:
a5:46:97:7e:87:53:06:74:ba:db:93:5a:9e:a3:b0:
2d:7f:8e:df:42:9c:d1:b5:7b:dd:e1:ec:6f:6e:2c:
ed:ab:34:56:89:7f:85:50:62:c9:ea:78:32:76:4d:
75:7e:65:b7:f0:8b:30:1c:c2:9e:7c:f7:9a:18:e7:
e5:38:04:70:7a:3b:1f:6e:61:03:da:66:a0:f8:a1:
cc:d7:4e:c5:63:54:35:f1:93:ff:be:68:e7:8d:cb:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F9:DE:3B:18:5B:97:6F:A7:B6:F8:1E:9D:0D:22:3B:EE:F8:60:35
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e5:10:e9:14:ad:ae:87:74:65:e4:25:8a:9b:08:2c:a0:9e:
7a:40:d7:b1:79:2f:31:cb:d3:94:ea:8b:14:49:9e:26:dd:b2:
bf:25:8e:03:c0:5e:da:29:fd:d1:f8:8a:eb:71:90:e1:df:49:
ad:48:fc:ef:d0:b1:0e:4d:02:03:96:93:9b:df:22:f1:a2:98:
4b:2d:fd:02:6f:97:3a:37:45:e3:b1:5f:0b:48:5c:90:5a:0b:
0b:6c:bc:44:b8:3c:42:46:e0:ad:f0:99:ed:0f:65:23:73:c8:
b1:d7:97:f2:e1:59:ac:f0:25:6e:57:61:ab:a4:5b:30:86:5c:
42:09:c5:41:e4:de:93:d6:1b:e3:0c:32:c8:f0:45:13:e5:fd:
50:d8:72:5e:d6:46:59:f9:d9:92:76:8e:b0:31:1d:98:79:d4:
50:8e:54:c8:59:3f:90:8a:95:66:b9:ae:23:21:7a:75:bb:e7:
18:22:bf:66:3d:48:c6:21:f7:c2:75:d9:4d:f5:8e:be:c7:29:
a7:fb:a2:e2:a0:85:22:b5:47:e8:3d:c7:d0:f4:90:63:2b:fc:
d9:9c:58:90:c6:db:73:c2:5c:04:fc:ea:7a:29:cb:8a:0c:05:
69:0b:37:e3:57:3b:51:1a:d0:6e:4d:3b:07:a0:d4:e8:0a:54:
cd:51:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:17 2025 by rpki-client