Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: Oj76uNS6htwiijVRzM8Xy5/j8Eg7XiQeFVmcKtNFgOo=
Subject key identifier: 83:F4:0F:C9:94:89:BA:E6:69:AA:6D:01:61:02:F8:F8:5D:AB:47:0B
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019853446DD30627B56396D6CFEA813B8B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 11C9
Signing time: Mon 28 Jul 2025 23:00:50 +0000
Manifest this update: Mon 28 Jul 2025 23:00:50 +0000
Manifest next update: Tue 29 Jul 2025 23:00:50 +0000
Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=)
2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: 41Nm6uKSoHKWVwp8ahThpjpTzQB8TFsw7vwld2MdfgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:6d:d3:06:27:b5:63:96:d6:cf:ea:81:3b:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jul 28 23:00:50 2025 GMT
Not After : Jul 29 23:00:50 2025 GMT
Subject: CN=83f40fc99489bae669aa6d016102f8f85dab470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:3f:45:5e:9c:25:a7:ba:d6:27:1f:48:12:
a7:48:60:2f:79:b5:af:9e:a4:96:aa:e4:fb:70:1d:
9a:9e:20:07:d2:27:2b:7f:8f:ea:47:8b:6b:f8:03:
5a:0e:46:65:bc:4b:18:c9:9f:a1:fa:35:6b:65:15:
c5:e2:08:ec:63:dc:c0:12:01:5a:1b:00:0f:bb:09:
45:25:a3:4a:53:33:b7:b7:9e:81:a3:a2:11:aa:4a:
63:02:c9:6a:bb:26:1a:78:02:2e:5d:f5:a6:f8:44:
5f:80:07:72:60:79:da:5e:f8:ec:4c:7c:7a:42:16:
af:e3:95:9c:91:d2:c1:e2:b7:34:99:75:72:6e:7b:
6c:b5:0b:3a:0d:4e:fa:71:7e:32:aa:56:9f:06:44:
1e:5f:15:38:c3:03:54:25:05:8b:3e:b0:ea:92:2e:
69:70:0f:30:90:57:1c:2f:b3:99:9e:37:3c:4a:4e:
39:17:5c:c5:cf:ee:10:33:f7:06:1b:d8:51:c0:01:
12:57:a8:f0:82:ce:50:9b:6e:13:2c:0a:8c:9e:74:
60:b1:92:25:ea:7c:89:83:d9:d3:cd:9b:be:6c:ff:
90:7f:48:97:57:2f:8d:f1:6f:ba:ac:35:23:5e:11:
c5:25:dc:cd:8c:1b:5a:e7:c6:db:81:a1:4f:45:a6:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:0F:C9:94:89:BA:E6:69:AA:6D:01:61:02:F8:F8:5D:AB:47:0B
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:5a:f7:5f:ad:a9:52:7e:26:ae:f5:8b:fe:f9:72:95:80:
f5:86:04:1d:23:49:bc:45:bf:84:2e:e6:64:a1:ca:b4:2f:2a:
fa:87:9d:46:c8:69:2b:70:70:25:6f:ac:0e:fb:b4:48:53:4e:
d2:be:14:60:c9:96:d9:8a:82:80:69:f0:31:8d:3a:69:4c:ad:
72:60:e3:82:83:48:06:5c:bb:af:18:7b:24:14:b9:21:84:05:
b3:5a:1e:9f:da:94:24:07:a4:86:6c:1d:6b:89:cb:18:47:06:
5e:69:0b:dc:ef:1f:dd:4f:f5:e2:ef:34:2e:90:2d:c2:99:cd:
c7:e3:2f:0a:17:e8:88:ac:d6:fa:3b:5c:22:de:59:8b:c3:06:
68:63:00:fc:09:49:4a:95:07:e4:27:fd:f6:6e:2e:75:b5:b6:
e7:5c:fe:20:1d:33:fe:b5:6e:9f:a0:e8:cf:34:32:83:cf:4c:
1d:70:5a:e8:ec:94:f5:04:ce:45:ca:64:8b:45:b1:c2:0a:0f:
bc:d5:09:6c:65:41:1f:2b:b4:67:6d:95:58:0a:51:2a:9a:a5:
ef:60:da:2b:77:09:02:3c:6c:50:6c:63:d5:e6:0d:11:2b:5a:
d4:f9:19:4f:71:c2:ca:08:53:6a:4d:10:21:6f:6a:ac:5b:0f:
a8:67:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:08:35 2025 by rpki-client