Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: HTTItiU5MMlTguasuTrrMAwTojPjX0Gp5geJUMcmLrw=
Subject key identifier: 41:54:E6:CD:53:41:2C:7B:81:6D:60:C5:3C:F3:C5:FD:FD:37:12:B1
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 0199221E6F9AA640B3AF3F665CDA98F4C820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 053F
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: ZvUlen65eqqFmbmaxD1aX21aGQqQQRhWUEwO3drQBj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6f:9a:a6:40:b3:af:3f:66:5c:da:98:f4:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=4154e6cd53412c7b816d60c53cf3c5fdfd3712b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:c2:13:fd:4b:0f:cc:04:65:48:cb:0a:74:
02:d2:04:e2:15:8c:53:6b:8b:86:61:ca:94:57:c2:
58:43:66:b5:39:7c:ab:4d:40:13:58:c5:38:ec:1d:
e3:f0:5d:c8:19:a9:9f:2b:02:2a:c2:9b:4d:e0:05:
4c:1c:36:d9:fd:ef:9e:83:fe:21:6e:6a:48:d7:ad:
de:2c:9a:ed:5f:34:e7:b2:e6:43:8d:a8:f1:44:c5:
23:73:67:08:a0:a4:55:a9:98:61:40:0e:e4:d8:2f:
81:bb:f9:37:e5:06:cd:3d:88:5b:b8:39:1c:4a:a6:
a0:de:c0:b6:90:1d:42:e1:64:d1:9c:55:9a:62:7f:
c5:92:8f:75:6c:05:a4:c4:54:3f:de:b7:ca:fd:7d:
8d:9f:bc:77:7c:2d:5d:07:bc:72:f7:be:27:a9:2f:
1a:e2:ef:60:b6:dd:47:1a:b4:4e:41:bf:66:d1:9a:
07:38:9a:4f:6a:84:7f:e6:42:a0:de:9c:63:8e:10:
13:36:f6:0b:a9:2b:dd:c3:de:ab:8d:62:ac:67:b6:
f9:de:d7:60:06:18:e5:c9:04:9c:57:73:7c:da:7a:
b0:36:4c:4a:26:d9:ed:db:61:86:02:b2:03:56:bf:
01:f6:ed:b6:08:e2:3e:52:54:2a:ce:93:63:9f:41:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:E6:CD:53:41:2C:7B:81:6D:60:C5:3C:F3:C5:FD:FD:37:12:B1
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:45:63:22:bf:50:31:09:8d:95:c9:e7:83:55:01:40:69:3b:
b0:ac:eb:2f:d4:3d:48:25:34:72:ee:8f:b9:f3:28:7c:78:ee:
d0:e5:98:de:e7:e2:6f:38:41:97:ed:b7:a9:43:6c:7f:ab:f0:
93:08:77:fc:4f:82:2e:b0:48:4b:08:67:a8:ac:a5:6c:2a:a2:
3f:71:1d:9d:d6:c2:92:bd:f6:a7:e2:ab:31:91:1b:b4:f3:68:
69:76:c5:5a:1e:d4:a7:81:33:88:fc:63:7f:b9:14:44:df:76:
32:04:3c:c9:16:e1:72:0d:ab:38:94:9f:58:79:96:f3:bb:66:
fe:a3:bb:47:07:6a:63:39:c5:e6:8c:a2:6d:03:7f:15:66:43:
ea:1c:70:04:67:fe:42:73:7d:56:ec:d5:79:a5:5f:21:69:09:
7b:19:eb:da:74:8d:66:6a:27:4f:9c:d5:7c:40:7a:ed:8e:75:
b2:ca:8a:da:0a:9d:87:b2:37:91:97:92:5e:04:2d:87:b1:b7:
ba:21:67:5b:67:97:97:d0:dd:d2:2d:98:b6:cd:15:d9:d2:83:
5a:21:af:53:6e:4f:c9:9b:cc:71:2a:8e:27:54:d7:bd:d3:b8:
e8:a1:ce:16:5b:e6:ff:5b:e1:a6:82:62:05:3c:2a:ff:3a:66:
23:d6:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:19 2025 by rpki-client