Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File: k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier: n24UBg07ejVxGef9M7FO/HbIS+hNX+v5wiOrw28vr5g=
Subject key identifier: F5:3E:E7:89:F6:BF:EB:9F:ED:84:F1:40:EA:60:D1:73:18:BE:DF:60
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0198402B4A222D495A22C8E771B193764386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number: 1300
Signing time: Fri 25 Jul 2025 06:00:35 +0000
Manifest this update: Fri 25 Jul 2025 06:00:35 +0000
Manifest next update: Sat 26 Jul 2025 06:00:35 +0000
Files and hashes: 1: SboGMTB-9QHWroFpAbYSHcl3CKo.roa (hash: rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=)
2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: gcRopatZtXD1mIYjsUZ3KZXavQD0bMQvixZTSiWWBTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:4a:22:2d:49:5a:22:c8:e7:71:b1:93:76:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Jul 25 06:00:35 2025 GMT
Not After : Jul 26 06:00:35 2025 GMT
Subject: CN=f53ee789f6bfeb9fed84f140ea60d17318bedf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:53:12:21:9a:9a:ee:f8:3d:15:9f:96:72:
f9:69:1c:f4:3d:59:49:b3:c0:21:ff:22:6e:58:ec:
86:0b:ee:b6:dc:7a:86:57:b3:ac:bf:11:9f:8c:75:
26:ad:e0:7c:68:d5:6b:e5:a9:24:0f:39:e5:cf:99:
56:72:ef:6f:45:6c:f4:d0:48:ab:56:7f:6f:2b:e0:
da:7d:fb:e5:8d:96:3e:16:7f:7c:fb:ae:c9:40:83:
42:06:3b:22:2e:f5:61:73:61:26:bc:c5:5a:3d:25:
91:a1:48:36:ba:74:41:a8:b2:8c:75:ea:a3:d8:d3:
0e:12:0c:d1:08:4c:74:64:3e:a6:43:72:cd:f9:72:
34:ea:d6:6f:ac:8a:ef:7e:7a:d3:b2:35:2d:96:51:
62:e2:f0:b5:5e:ef:f2:04:de:f1:2c:39:15:c7:77:
12:eb:9c:70:6b:d6:a9:03:9c:29:4c:b4:85:06:0b:
a5:f3:f9:44:11:12:c5:c0:d4:a2:71:bf:46:7f:6e:
39:d1:44:7b:62:fa:61:a9:0f:83:d1:6a:88:bd:42:
47:ec:85:a9:ab:0d:01:67:59:1d:d2:a1:36:2b:17:
8c:3b:0e:a5:66:59:9d:f3:2e:5b:6b:a2:70:5d:15:
82:94:2f:73:9b:8c:55:3f:6f:af:22:7d:b1:31:7c:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3E:E7:89:F6:BF:EB:9F:ED:84:F1:40:EA:60:D1:73:18:BE:DF:60
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:48:25:68:f1:ad:b6:1b:5a:97:3b:b8:2c:d4:a4:35:57:
30:59:7a:ae:56:84:51:d6:ab:c2:b0:47:66:b1:e6:da:ab:f8:
74:62:8d:38:bb:db:18:ba:f4:55:18:7d:09:9d:ac:a8:7f:38:
d8:cf:1b:1d:2a:83:40:b5:1e:b7:72:cf:6e:4f:82:91:bf:1f:
a2:bf:89:29:dc:ee:95:8f:b0:9c:18:26:b9:4a:e5:9b:a6:87:
74:71:e5:6e:cf:bd:56:6d:e5:c7:b4:7a:9f:a8:8a:b5:83:87:
6d:71:66:ea:6b:40:e9:4e:c5:6f:8f:81:25:0f:e4:d0:00:3f:
fd:4a:e4:ef:c3:74:3c:51:93:17:51:5a:44:72:50:f3:26:7b:
47:31:ae:52:a1:4d:e1:b3:d8:dc:eb:09:8a:59:c8:2c:94:7a:
a4:d3:d3:aa:35:81:88:01:63:34:ae:93:b2:05:8c:7c:16:73:
ef:41:2f:de:46:df:b2:36:2f:78:ce:33:3a:2d:34:d0:f1:45:
f0:91:26:c3:af:52:2e:b8:18:02:43:a1:32:4d:83:81:04:08:
a7:70:4d:4d:32:c6:38:da:09:48:5a:88:73:27:4e:5f:41:b3:
3b:c3:6b:76:1f:de:aa:3b:51:f1:6b:3b:92:c9:02:ec:84:09:
b8:53:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:22 2025 by rpki-client