Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: Wb3m7TYAVWjeR+C7axwihmYe+3RGWUDPtz31O7JvH2c=
Subject key identifier: E1:F4:E7:95:98:78:AB:B1:CC:E5:6D:C2:01:7F:9D:7D:0C:66:06:A3
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019853442BAB6D6C547CF10ED17C3F76EBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:33 +0000
Manifest this update: Mon 28 Jul 2025 23:00:33 +0000
Manifest next update: Tue 29 Jul 2025 23:00:33 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: bTapSOSWtMBP+RtW0e4SDgBgJRJFWSGZWfPzDU98Ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:2b:ab:6d:6c:54:7c:f1:0e:d1:7c:3f:76:eb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jul 28 23:00:33 2025 GMT
Not After : Jul 29 23:00:33 2025 GMT
Subject: CN=e1f4e7959878abb1cce56dc2017f9d7d0c6606a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:50:3c:a3:ed:f4:42:e4:a6:47:f5:5c:df:
96:5f:70:f1:84:fc:00:e5:c1:1f:c4:a4:e9:21:34:
b2:27:c4:51:cc:ae:eb:09:63:7a:ea:c2:67:8e:25:
4b:94:0d:02:ea:ce:d4:03:0f:07:89:a1:1a:0e:bb:
22:76:59:af:92:72:13:82:c5:88:4f:6e:81:de:8f:
9b:33:a1:b0:18:27:26:59:e6:cc:29:80:30:d2:c7:
c1:18:65:4c:84:db:6f:2a:df:b8:c5:06:7e:d6:be:
cb:b0:c1:54:ab:9f:c1:23:bd:64:ce:39:79:73:6a:
91:0a:38:9d:a0:a4:e5:f6:ca:1e:9d:80:82:a0:ac:
f1:72:b7:81:43:1e:ce:75:90:39:e1:db:48:ee:67:
61:c5:e6:cd:5d:a7:00:a5:9f:d6:bb:1a:b0:b7:a4:
c7:70:3f:38:82:a1:d4:3c:58:1c:bf:ec:29:fe:f3:
ef:be:7b:67:d0:5e:f6:6b:8a:ec:6d:be:5d:67:80:
b2:c8:a2:07:ac:6f:84:56:e4:3e:e8:00:69:a7:70:
89:78:00:64:54:61:d6:9d:ec:7a:ea:ab:df:16:7e:
ef:a2:84:ec:94:78:d2:2e:0a:50:d8:7a:51:2d:79:
2c:66:df:b1:c4:4e:24:dd:bf:f7:9e:a1:b5:1b:06:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:E7:95:98:78:AB:B1:CC:E5:6D:C2:01:7F:9D:7D:0C:66:06:A3
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:5e:81:2c:3e:46:24:80:8e:57:b9:42:b3:c3:e2:d0:25:
bc:e4:f6:4e:cb:af:0b:57:d3:c5:2d:bf:bd:df:30:0c:59:56:
f8:52:aa:12:39:97:0d:04:4f:ca:e5:e9:4d:83:a6:2f:ed:d6:
9e:49:75:81:29:11:fd:9c:15:98:18:09:d2:9a:8e:6d:83:78:
82:92:f1:3b:1d:64:08:49:0e:94:59:77:1d:7e:a0:57:04:92:
ce:f5:85:68:b5:5e:bd:85:b7:78:21:4c:bd:42:a3:1e:40:b0:
02:2e:64:b6:96:0f:8b:6a:c2:eb:15:8b:b2:4a:f1:48:e9:68:
58:c2:c7:7c:4d:42:7f:97:6d:8a:81:9b:62:8b:72:12:f7:ce:
5c:2d:50:74:f9:89:66:95:8d:f9:31:86:53:89:ee:59:c5:37:
ae:bd:19:40:cd:ee:77:ed:44:2c:c0:09:74:74:ee:e1:cd:ea:
d7:be:55:a7:f4:3b:54:27:69:08:00:20:90:13:93:7c:59:8a:
84:0a:0a:0b:60:fb:f0:1b:03:64:7a:fc:10:9e:60:61:6b:1d:
fd:72:a5:22:27:6b:97:0e:a8:5e:07:eb:1a:c7:6b:d0:af:91:
89:64:c3:a6:bb:8d:99:96:25:31:12:66:55:f1:11:7d:71:02:
23:07:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:57 2025 by rpki-client