Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: wRkXFOwgTKpJ0w5n8Jw2I4x+NTzSL1vU3uvBeq4vO5U=
Subject key identifier: A3:E1:6B:39:CE:18:76:64:A3:59:12:0D:FD:7D:D6:48:C6:C4:85:C8
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 0199221E6F86C9B6698FA31F92C0661321FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 121F
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: DkOvl8w79AUU4lZ/6QhjAjY6Jip4Bo36E73cRotZimg=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6f:86:c9:b6:69:8f:a3:1f:92:c0:66:13:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=a3e16b39ce187664a359120dfd7dd648c6c485c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:da:62:7f:3a:b6:99:87:c3:5c:4f:99:84:
8e:61:33:70:e8:d8:f4:43:52:cb:08:f6:13:65:42:
60:dc:bf:54:ae:89:c3:eb:3a:5b:b4:8d:bd:47:06:
13:c2:9f:c9:27:a0:ef:6c:42:26:18:1b:c9:37:60:
4b:88:60:72:b8:e0:44:20:01:77:97:8c:d7:21:6c:
07:aa:5f:29:a7:0c:0e:eb:3c:47:6e:4a:1c:ec:ea:
8b:35:9b:3a:b3:ff:74:55:81:53:61:84:08:e6:51:
52:66:d3:d3:e6:cc:54:68:65:ec:4c:e6:ee:cf:d5:
c3:92:91:22:9e:32:81:7a:f1:a0:e4:4e:24:4b:6e:
50:f4:b8:ef:c1:d0:b5:9b:14:8d:44:24:c1:ea:dc:
1b:de:35:89:62:90:72:ef:a3:f9:fd:ad:af:78:d3:
cf:89:f0:23:1c:24:27:a5:42:fe:7e:f0:d6:84:ff:
4b:b1:ab:7c:3d:16:6e:e5:89:41:32:61:91:44:c5:
06:1b:5c:c9:9c:c2:4b:4f:58:d6:ae:78:44:88:f6:
a6:f5:f7:c9:e0:9d:41:da:94:5a:f7:16:27:05:08:
2d:08:b6:1a:bb:e4:f7:1a:eb:3b:7b:8a:20:33:b2:
1b:92:01:72:45:4f:4c:82:f4:10:9b:92:11:9b:ba:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:6B:39:CE:18:76:64:A3:59:12:0D:FD:7D:D6:48:C6:C4:85:C8
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:06:91:92:02:6c:0c:33:96:2e:9c:f2:a4:14:e2:e6:f9:
90:04:2c:ce:91:c6:28:3b:33:14:ba:a7:69:5b:2a:52:0f:6e:
18:92:d8:d5:09:e4:36:8e:82:65:18:af:18:91:84:48:03:75:
52:9d:73:c1:63:d3:6a:bc:17:64:7d:3c:8c:ff:d0:5b:d4:4d:
f1:50:bf:02:52:13:60:1c:7a:83:b2:26:cb:c3:56:83:a2:12:
06:16:76:23:49:3f:55:90:7f:d0:62:ba:3b:64:6b:68:a2:80:
75:1d:ff:e1:53:b1:4f:eb:87:22:ed:36:54:44:08:77:8e:48:
d6:c3:10:c8:0f:93:37:83:ea:63:2f:6f:78:70:e1:4e:b0:a5:
75:c6:3e:21:b4:94:05:59:e8:58:7d:7f:3c:2c:cf:3a:36:36:
1a:0e:3e:93:ec:d3:80:b2:35:16:b6:33:55:a8:88:b9:bf:2a:
10:46:aa:2e:18:e6:e7:68:35:05:2f:3b:18:3b:61:4d:72:1a:
87:42:3e:42:63:03:09:3f:c9:10:72:c1:6c:2f:2d:87:cb:2f:
c7:18:36:b4:ec:f0:19:4b:dc:b4:15:f8:f4:be:e1:6a:3a:bd:
aa:29:d2:59:84:e4:83:d2:25:47:89:cd:9f:b9:19:dd:71:a8:
4a:7a:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:39 2025 by rpki-client