Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: f+trqNA5zaLp2uFg1tIbPqbZWdzceH/0lZK4HBM/NsM=
Subject key identifier: B4:0A:49:36:87:41:0C:E3:E7:B8:7A:B2:6D:32:75:DC:B1:F7:8B:7A
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 019859473C8DB43117A58C02D4E5C7D057D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 03:01:37 +0000
Manifest this update: Wed 30 Jul 2025 03:01:37 +0000
Manifest next update: Thu 31 Jul 2025 03:01:37 +0000
Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: AyrU1zJrHzuSZUTxsR6XoRDnggRwCOLqIqor9HDSWA4=)
4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:47:3c:8d:b4:31:17:a5:8c:02:d4:e5:c7:d0:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Jul 30 03:01:37 2025 GMT
Not After : Jul 31 03:01:37 2025 GMT
Subject: CN=b40a493687410ce3e7b87ab26d3275dcb1f78b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:7e:a9:72:8d:65:02:30:97:3b:9c:a6:9f:
94:15:ba:d4:9d:54:ff:65:64:37:75:0f:da:80:c7:
1b:fa:c6:bf:fe:1d:cc:01:6f:9a:80:24:8c:62:b4:
9e:85:ef:2c:06:b8:01:3b:fc:03:3c:2d:3f:20:df:
14:d0:7b:c3:8d:ef:fa:ac:02:a4:9d:14:bd:cc:49:
68:6b:0d:bb:72:34:9c:45:ec:c0:1f:76:a9:a0:d6:
44:5b:df:25:ff:28:39:cd:b7:5c:20:ef:43:6e:38:
da:64:c7:70:1c:18:df:66:e1:f5:da:42:0c:51:10:
3b:d2:a8:06:13:8d:1e:ef:1b:70:61:cb:da:f3:8a:
a4:a2:cb:35:c1:00:cd:aa:e5:60:f4:fe:13:7b:c6:
b6:d5:75:bf:d1:f7:9c:e8:fa:e1:b7:6e:f4:63:72:
05:63:b3:b3:a5:bc:3d:82:4f:48:cc:e0:10:72:1c:
02:c8:39:4d:c3:f8:12:89:9a:0a:80:a5:e6:1b:a7:
89:10:45:9c:f5:f3:3c:9f:5d:bf:11:30:de:64:15:
d0:87:71:d7:55:a7:17:ec:f8:0c:db:74:3e:1d:49:
a8:2f:66:07:fd:7a:0a:0d:3b:fe:7c:a2:76:e6:d7:
5e:9f:05:39:d7:13:cd:de:c4:c6:8e:15:c3:bf:72:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:49:36:87:41:0C:E3:E7:B8:7A:B2:6D:32:75:DC:B1:F7:8B:7A
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:00:68:23:fc:c3:bd:72:2e:87:d3:24:e7:0d:c5:94:c7:
63:c1:ba:7c:fa:60:d7:4d:1d:7c:a6:b3:52:db:b2:4f:43:51:
23:5e:c7:cb:65:9d:3f:79:bd:21:e3:8a:68:fc:1c:bf:4f:8d:
f0:3b:3f:3e:79:cf:8d:8c:f6:dd:d7:26:64:6e:78:4b:87:db:
0d:45:3b:b2:f1:aa:9b:77:e2:a8:f5:c9:d1:38:10:37:a3:c3:
f4:c7:98:d5:aa:51:4f:2e:1b:fd:17:68:87:e8:40:d9:73:4f:
5c:b5:74:08:ba:e2:89:78:f0:14:d8:bc:3e:f5:eb:ce:a5:b7:
8e:62:3a:f5:98:eb:ed:cc:d2:5f:c8:20:53:58:31:23:71:23:
76:96:71:65:f1:a5:35:34:52:be:c6:3d:6f:70:12:55:6b:7e:
0b:0a:c4:0b:7e:37:78:bb:64:fb:aa:f8:2d:d9:35:32:f5:2e:
3b:cb:76:ff:14:cb:c9:36:e2:8d:4f:07:d1:6b:40:f2:41:53:
01:6d:45:03:5a:61:26:cb:cd:e5:ca:1c:8a:b7:87:70:a6:44:
5a:4a:38:7c:c9:ba:f4:45:a5:41:6a:88:84:23:1c:f6:3f:79:
5c:22:d7:14:eb:e8:d9:93:20:3c:dd:21:67:78:a5:d4:c5:7d:
c0:51:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:22:30 2025 by rpki-client