Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: wO5NIp6l1vGMSXhC7NmyxDU3cc66VuH+P5EAToPBi/w=
Subject key identifier: 7F:F5:57:DC:84:F7:9B:9A:BD:8E:D0:5A:3E:92:97:0A:D6:3F:0B:5E
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019938DEA805409C4095CCB4836813A7BA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 063A
Signing time: Thu 11 Sep 2025 13:02:20 +0000
Manifest this update: Thu 11 Sep 2025 13:02:20 +0000
Manifest next update: Fri 12 Sep 2025 13:02:20 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: m5eh9rpnsAxDVI3l3j9vbXdhOz3sLE9RPcJVPsNluP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:a8:05:40:9c:40:95:cc:b4:83:68:13:a7:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Sep 11 13:02:20 2025 GMT
Not After : Sep 12 13:02:20 2025 GMT
Subject: CN=7ff557dc84f79b9abd8ed05a3e92970ad63f0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:df:cf:30:cc:81:af:a2:f8:cc:55:e9:9a:
b8:66:ad:26:1c:c3:3f:2c:eb:c6:d2:c1:bb:a0:01:
8a:a4:87:c0:82:fe:68:81:ee:25:d9:3b:b9:c8:12:
8d:1a:c4:69:7f:b2:81:53:b8:b5:db:d7:11:94:6e:
f5:67:e6:0d:3a:14:fc:08:83:1f:0f:39:ae:25:44:
f2:a5:fc:3c:9a:a0:5b:18:07:5c:c3:0b:34:07:8b:
a6:f4:c3:d8:7f:1f:98:8a:63:e5:af:5d:ea:69:74:
67:ff:fe:b5:42:ce:ef:5a:40:7d:07:9a:d2:ae:c8:
1c:c6:11:d1:54:1e:53:82:04:30:ec:e8:5a:3e:0f:
07:38:dc:14:48:1e:38:9c:49:e1:53:f4:93:58:d7:
6b:b8:6f:cf:a6:97:77:65:b1:6e:7f:70:2d:3e:ea:
4f:6b:f1:03:f4:a5:a8:3b:98:5d:a7:57:47:38:99:
ac:89:96:1a:ef:25:4a:91:2b:ea:88:30:10:e4:dc:
24:1d:45:3f:74:03:99:ba:2e:e5:df:13:6e:18:60:
d9:69:7b:a0:8a:51:37:cb:c1:58:b9:42:9f:d6:b5:
fe:57:90:73:93:6d:ae:a5:a7:dd:20:5a:47:93:88:
6d:10:06:3e:c6:a3:e0:1b:27:3f:4f:d5:61:5d:14:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F5:57:DC:84:F7:9B:9A:BD:8E:D0:5A:3E:92:97:0A:D6:3F:0B:5E
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:8f:f2:7e:fc:d2:b8:d3:5f:66:04:67:a7:cf:e1:42:4c:
10:67:16:25:31:f1:a9:55:f5:6d:29:fc:9b:82:50:cc:a5:2e:
07:0b:42:8d:e3:eb:49:ff:b1:2a:ac:9e:b7:a9:d9:80:ed:12:
6d:e2:bc:0f:a4:2e:fb:d9:0a:02:13:96:d9:34:1e:cc:54:ed:
78:f1:f5:95:a9:87:38:9a:65:f8:8a:80:28:c8:0d:22:e8:d8:
15:0f:9b:ea:57:a6:e7:3c:f5:71:d5:03:87:00:14:55:d0:4d:
d3:fb:81:34:78:67:fa:f4:20:9c:61:6b:c1:e7:7a:9f:61:a7:
dc:da:4a:9b:ff:78:8c:42:8a:45:ea:55:b4:6a:9c:cb:17:dc:
f0:d1:1a:86:48:08:f9:3e:99:2f:f9:7e:f1:5a:b8:78:a1:f5:
fa:05:0b:1f:bd:b4:ee:76:44:c8:71:cf:b7:ce:4b:79:65:f4:
3c:00:e8:88:d5:f0:d8:da:91:40:90:93:85:16:bf:f7:83:47:
e5:d6:0c:7d:02:a5:00:33:3c:54:db:b4:55:39:9d:4c:05:ff:
6c:18:12:61:4f:04:63:be:8f:16:8c:e2:96:0d:a4:fb:c1:3c:
3a:7c:e3:cd:cf:3d:a1:32:fe:11:07:36:7e:30:4b:27:2a:c8:
a3:db:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:30:45 2025 by rpki-client