Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: H/qNMB61CKbc+jUxRrl6PhB0P8KQsBx9RewjqJlHBpo=
Subject key identifier: 5E:54:5F:DA:FA:21:BA:E6:C9:7A:30:7B:6D:2B:D5:1A:B6:5B:48:43
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 0199179AEAC61768A0AF3930D6F6F92A28E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 02:00:52 +0000
Manifest this update: Fri 05 Sep 2025 02:00:52 +0000
Manifest next update: Sat 06 Sep 2025 02:00:52 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: muEJ/5tuGVsebyLrPScNBEoceWgCv7FI3kCBOmZwscs=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:ea:c6:17:68:a0:af:39:30:d6:f6:f9:2a:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: Sep 5 02:00:52 2025 GMT
Not After : Sep 6 02:00:52 2025 GMT
Subject: CN=5e545fdafa21bae6c97a307b6d2bd51ab65b4843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:21:19:2f:4d:d1:7f:01:ce:65:8f:64:f5:
1d:18:cf:d7:64:b6:51:36:f0:0f:f9:30:92:d9:d5:
7a:f0:3d:61:55:da:47:00:1c:47:1b:31:9c:1c:02:
7d:76:f5:47:e3:9f:ce:66:81:00:5c:de:d2:bc:5e:
7f:24:3f:99:21:13:71:9f:5b:bf:26:2f:13:04:6e:
3a:d3:30:9c:3d:66:d8:7e:9d:5f:1f:79:45:f8:04:
7d:ba:c7:07:07:c0:ca:08:67:85:31:35:5b:72:2a:
f0:46:56:83:08:e6:9c:01:04:53:df:5b:95:c9:3f:
c3:6e:6d:d9:25:6e:3d:e5:7c:fd:88:fe:4c:26:7d:
b7:cb:4d:10:71:41:50:96:cc:f0:d2:9d:83:1f:1f:
30:9f:fb:f6:1b:7c:28:14:03:bc:6c:99:32:9b:91:
3c:62:81:d0:76:50:99:1c:05:db:3a:3a:27:8d:b9:
08:cd:e0:90:45:6c:af:ce:4b:ac:30:d5:86:c6:2c:
56:11:6e:96:a0:ab:9b:8d:fd:da:0f:83:88:ee:ff:
52:f0:58:9b:7f:1f:7e:eb:d7:e8:ac:cc:c4:c5:2e:
80:17:06:b9:7c:09:ce:c8:33:23:12:97:b4:9d:cf:
1b:db:12:73:65:11:85:71:b0:f9:0a:b5:05:31:2b:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:5F:DA:FA:21:BA:E6:C9:7A:30:7B:6D:2B:D5:1A:B6:5B:48:43
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:bb:9e:f1:10:ea:b9:3e:18:70:a4:83:2d:84:87:f7:75:
26:04:da:c1:ff:78:5d:8d:91:70:75:c5:5a:0b:9b:7c:5e:7b:
bb:06:b2:4d:55:e3:ea:c2:be:01:93:c5:bb:83:91:42:19:ff:
a2:7d:84:2c:ee:a1:80:45:37:df:8c:54:7a:36:9b:10:7c:fa:
b2:31:ac:1f:55:d2:e9:d3:0c:f1:43:38:04:7e:ee:49:18:39:
c9:31:9a:85:a1:19:48:f6:7e:eb:2f:57:60:7b:a0:ee:e0:ab:
09:04:78:06:54:4c:d5:cf:06:d4:79:cc:f2:71:7b:c1:29:f2:
d9:41:fe:b3:b3:aa:73:5e:84:f6:3f:c3:12:1c:0a:5b:ed:90:
b7:4a:6d:cf:c5:b9:60:e8:c3:6d:d9:a1:de:cb:62:ac:aa:6e:
70:17:8a:d8:03:0e:44:ba:50:44:99:fc:0a:04:e3:7a:03:83:
42:08:c2:63:5a:2a:b6:b0:99:8e:a3:b6:bc:f8:d0:ae:ae:ee:
db:0b:75:d1:ef:a0:b7:0c:ba:ef:e4:08:28:ff:1c:36:32:20:
95:75:35:63:ab:9a:bc:5c:8e:ef:07:8e:5d:58:c3:90:b0:29:
ea:2c:f8:4d:fe:8d:4c:c6:01:56:d6:fa:83:c9:8a:10:18:b2:
f6:f6:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:25 2025 by rpki-client