Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: 5l6N4OE5E6DCcOtvTzmogryGmcBSYEtFSZtcuvYwu1s=
Subject key identifier: 15:0C:B5:33:FD:3C:68:6A:B0:9B:AE:9D:32:11:33:19:2F:0F:C5:FA
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0198439A43AE87BEA87E9AA8B03A085CF9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1614
Signing time: Fri 25 Jul 2025 22:00:40 +0000
Manifest this update: Fri 25 Jul 2025 22:00:40 +0000
Manifest next update: Sat 26 Jul 2025 22:00:40 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: Fp4vSW+bmQhasRV2vqVKem7je9KdvNNK2C17eWIsN8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:43:ae:87:be:a8:7e:9a:a8:b0:3a:08:5c:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Jul 25 22:00:40 2025 GMT
Not After : Jul 26 22:00:40 2025 GMT
Subject: CN=150cb533fd3c686ab09bae9d321133192f0fc5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:d4:b8:a4:55:71:c5:7b:87:31:a9:fc:78:
25:d2:aa:6c:8d:2f:00:3b:03:69:1d:42:10:9e:df:
d4:06:97:b7:3f:a5:2c:db:97:14:65:f5:e6:2a:25:
e1:0a:bf:da:dc:f5:58:10:da:e2:a3:56:60:a0:a2:
d0:08:09:31:5d:77:b7:3b:06:51:2b:66:97:01:64:
1b:83:20:97:6e:7d:89:4b:fe:6f:fe:71:1b:82:f8:
76:98:76:74:08:72:89:a5:3e:41:a2:65:4d:70:d2:
0e:93:2d:78:14:9b:39:28:41:c8:b3:63:a0:74:bf:
5a:4d:80:2c:74:e1:10:4b:e2:e5:81:7d:72:66:4d:
89:7a:98:52:01:eb:1a:b9:40:7e:56:74:c3:1d:aa:
72:5d:12:fc:09:9a:e8:15:09:70:b4:d7:68:cc:a0:
68:da:43:44:73:8d:d9:9d:ba:20:e9:11:52:c5:8b:
30:dd:e9:15:57:14:c3:59:54:05:c3:92:49:ec:bb:
0b:7a:8a:9a:45:a3:88:d1:54:8d:74:2a:c5:30:d0:
08:c2:47:b2:2c:f0:d0:85:52:e0:9a:26:4b:40:ed:
42:df:ea:c6:8d:d2:e4:c2:5e:2d:d5:c8:56:8a:2a:
7a:26:d8:3f:98:5a:f5:97:19:05:38:c3:e9:ec:6a:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0C:B5:33:FD:3C:68:6A:B0:9B:AE:9D:32:11:33:19:2F:0F:C5:FA
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:cc:56:fb:05:d4:ca:bc:d6:e8:11:b5:d5:d7:b6:74:7a:
d0:e7:e3:08:84:80:a9:b0:8d:b7:e6:27:4c:9f:ec:ea:f4:ac:
b2:bf:a6:7a:3f:e0:7f:6e:bb:37:3e:8a:25:c6:71:11:a0:1e:
6f:a1:88:38:47:92:eb:8c:c2:c4:30:bc:7c:03:bb:e7:5c:35:
98:e4:b3:8b:26:8e:5f:2d:d5:47:67:17:a8:65:47:09:67:0e:
53:5a:0b:67:87:f9:06:29:59:a1:78:3f:de:5e:64:ab:d8:b6:
ef:73:91:39:cf:cd:fa:28:c8:c6:25:20:2c:f5:7a:eb:d7:a1:
b9:8c:47:42:66:df:2e:18:b9:3e:34:47:2e:91:84:91:a8:3f:
c5:64:3c:bd:11:e9:67:da:ef:28:9b:9a:46:87:4c:e4:92:97:
52:e8:ca:3e:95:19:25:fd:87:66:d5:e7:ce:b8:99:a4:9f:2e:
ec:47:bb:10:d7:17:57:20:90:9a:18:83:25:d4:e8:a3:4e:31:
54:f2:09:00:eb:3d:91:c8:b4:fc:17:3d:1c:d6:ca:21:05:71:
20:8a:b4:95:12:e0:c8:b4:8d:90:3d:7f:57:26:ef:e0:76:11:
16:06:8f:cf:8c:67:7f:7d:16:78:45:c6:8a:8a:8a:ab:e3:54:
08:3b:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:12 2025 by rpki-client