
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: ZL71jdGzfLJAGG6Ss2WKuMk5+XZfXRvt0ZGn1sQki4o=
Subject key identifier: C5:87:BB:1B:CF:B6:FF:2E:58:06:F1:34:C9:C4:9F:77:1B:B0:53:3A
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019749686811608CEFA70E936FA8C35CD776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 0250
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: VVDFIOi2Uy1MQ7vvvOHj9hP/RmY9lE8D6q3ezl+P0Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:68:11:60:8c:ef:a7:0e:93:6f:a8:c3:5c:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=c587bb1bcfb6ff2e5806f134c9c49f771bb0533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:0c:70:9f:ce:01:a5:a7:a0:c7:32:56:d9:
4d:4b:94:b4:83:c2:36:40:4c:c6:d0:0c:be:bf:c4:
e8:be:bf:86:a4:ff:1f:e7:41:91:f7:95:2f:74:33:
28:82:b1:be:ad:2f:08:ab:22:a6:9f:f6:e0:63:97:
a9:69:38:51:4f:7e:51:cd:62:6f:b1:27:28:88:a6:
41:a0:ab:a3:c3:72:36:72:41:7b:40:54:71:a6:e5:
92:a7:27:62:f4:86:f8:78:b9:76:1c:65:b3:d0:1a:
88:b8:0e:e2:5e:7a:bf:7d:50:ee:37:f6:08:72:2b:
15:7b:15:fc:42:67:bf:0b:90:10:7a:c9:1c:86:5f:
05:32:22:23:7c:de:fe:77:21:7e:59:60:87:1d:04:
50:54:bb:0f:98:ca:c9:33:bc:b3:cf:a8:ab:96:57:
97:6b:ab:cc:d0:e1:74:62:a6:cc:b5:ab:0e:ae:3e:
f3:c8:6c:46:16:85:84:62:16:27:96:c9:6a:7b:1b:
36:49:63:86:3f:14:12:d7:86:2c:8a:c7:1e:b9:7f:
37:e1:60:83:0d:8f:7e:4f:03:d4:ac:8c:33:65:21:
3c:40:79:5b:9a:55:91:26:f6:b4:7a:b2:83:42:f7:
a1:95:de:6c:3d:4c:7f:a9:ca:ae:90:6c:8e:0e:55:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:BB:1B:CF:B6:FF:2E:58:06:F1:34:C9:C4:9F:77:1B:B0:53:3A
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:19:26:5e:05:8f:ea:c4:65:ac:0c:86:52:69:d2:da:9b:23:
a1:e3:a2:a9:d9:79:33:17:f9:b2:09:fa:b4:a8:88:52:71:e7:
36:8e:aa:d3:82:49:f8:78:04:06:0b:5b:8d:04:bc:10:e3:8d:
dd:4b:aa:ee:03:5a:0d:2a:3b:ca:38:04:5d:a1:f5:64:14:be:
98:0b:1e:76:70:1f:3e:1e:13:6b:f4:d9:3c:8e:33:d3:41:20:
7d:ed:68:3d:24:b9:31:a1:9b:03:3e:a0:99:06:91:69:5f:85:
df:fb:18:62:f6:90:e2:a2:18:36:46:d3:42:5c:3b:78:50:1b:
00:0a:2b:a9:59:02:d7:c0:fc:bd:ca:76:3f:16:33:b4:15:bb:
07:dc:c9:26:dc:8e:09:a2:0c:bb:11:bc:24:59:4b:6c:37:7e:
98:0f:f8:3b:db:5b:ad:ab:5e:03:85:4e:d6:6e:8a:ad:3b:06:
ca:e8:5d:5b:5a:78:f2:e4:5f:c5:6a:60:70:3b:01:0c:a7:7a:
c7:8a:99:1c:b5:73:83:3f:ef:e4:af:fe:f3:70:76:aa:13:5d:
a7:c2:d5:08:bc:01:7a:60:d1:d1:18:99:e9:e7:da:63:bd:93:
ce:4b:04:8e:c0:9b:49:b9:77:d0:1c:9e:55:e0:f4:63:40:02:
00:62:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:42:24 2025 by rpki-client