Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: pnnQTmwEGqE2WcVnR0s8YbLtcAZiZ/BDh6iV6diUdGY=
Subject key identifier: 7D:64:FE:C2:26:57:86:55:99:7C:65:63:61:1E:A1:7B:28:E8:69:60
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019847E50E46E08124F8C811CAF9EECA327A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 045B
Signing time: Sat 26 Jul 2025 18:00:50 +0000
Manifest this update: Sat 26 Jul 2025 18:00:50 +0000
Manifest next update: Sun 27 Jul 2025 18:00:50 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: FqPmsvm5loPud9eh1srAVmJmEmpvycmGLTUiZwunX7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:0e:46:e0:81:24:f8:c8:11:ca:f9:ee:ca:32:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jul 26 18:00:50 2025 GMT
Not After : Jul 27 18:00:50 2025 GMT
Subject: CN=7d64fec226578655997c6563611ea17b28e86960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:bd:b4:5a:a1:39:5f:16:d5:09:71:bc:3f:
c3:fb:3d:a3:7f:ef:bd:f7:cc:71:e6:a2:ad:c3:9d:
ab:79:9d:52:6c:e3:f8:07:e1:a0:84:3a:c7:64:12:
35:20:e0:38:a5:53:ac:5e:dc:ee:f7:14:67:74:a2:
88:b9:17:78:17:74:32:bd:68:af:73:64:ba:8e:b4:
31:5d:a1:be:4d:29:18:3b:02:39:05:eb:ff:04:24:
05:81:ea:1d:e0:e8:64:97:fa:51:91:7e:3b:0d:9e:
1b:df:3a:8c:78:2b:f8:a2:b7:99:59:85:fd:cc:80:
43:3f:57:dd:15:bf:05:40:02:ac:ed:94:44:fe:09:
6c:2a:5b:81:65:f9:d1:49:e4:18:68:ed:12:0e:03:
fd:3f:28:07:ae:bd:35:ce:f8:8d:f3:d9:48:f4:c7:
d5:de:2d:2c:ff:e4:7e:92:bf:04:4d:98:74:5b:cb:
d1:f0:1b:3c:5a:fc:6f:db:70:12:e0:32:28:08:55:
7e:c1:56:76:58:9b:67:b7:42:65:5d:01:ea:93:af:
47:c8:57:e5:0c:cb:9d:e6:21:d5:ff:f4:4e:f4:00:
ce:e5:fc:6e:00:ec:46:00:0d:a5:97:9d:ea:0c:1c:
70:d7:0d:ad:05:65:d4:13:62:0a:5c:32:b6:d7:11:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:FE:C2:26:57:86:55:99:7C:65:63:61:1E:A1:7B:28:E8:69:60
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5c:74:fe:95:5b:8e:c9:75:a5:6c:ce:c5:cd:28:c7:89:c3:
ad:1e:1e:34:b6:a0:49:35:a0:0c:27:c0:bf:54:82:b9:e4:9e:
e1:fa:df:d3:94:9d:08:03:43:92:32:92:31:7a:60:5e:13:fb:
9f:31:a8:87:3b:28:83:c4:6e:17:1e:de:b7:e7:ee:07:c0:f0:
ac:9d:a8:7c:fc:6c:f9:78:10:ee:ac:6a:d7:f3:4f:11:45:ff:
6b:e6:aa:70:e5:df:2a:47:64:d0:b9:02:2c:c8:b5:cf:dc:c4:
62:cd:6d:8e:aa:0e:18:e0:6f:8e:1a:dc:0a:68:23:b1:65:2b:
d4:23:cc:89:76:0d:dc:60:c6:42:dd:09:98:9d:50:5b:dd:33:
5b:ad:3c:ec:df:51:f4:57:52:40:22:34:6a:07:12:23:35:4e:
dc:9b:3f:b9:89:96:1f:2c:ed:ed:13:19:a1:f5:37:a8:b0:d8:
68:df:9c:59:f0:02:22:df:ff:02:ac:cf:f5:3d:80:a9:b0:cf:
c7:d3:15:98:3d:1c:95:27:7a:9e:12:8a:8a:62:47:91:d9:68:
61:00:59:2f:b8:bf:9e:ba:bb:55:7c:d6:e4:67:b6:44:eb:65:
8c:bf:a2:f9:06:df:0b:de:38:ad:38:6b:37:9d:ce:3e:b3:59:
d8:89:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:41:01 2025 by rpki-client