Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: eJMyZyVhBDsyfOPtUFnf89JBrmOdVjIQ7Ulh4an5Ty0=
Subject key identifier: 4D:61:A3:D7:F4:AD:D2:A9:FA:06:0A:2F:AB:3D:C0:DE:FE:4E:CF:EE
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 019848531A3E686DECABDFC0A20A46193EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 041F
Signing time: Sat 26 Jul 2025 20:01:02 +0000
Manifest this update: Sat 26 Jul 2025 20:01:02 +0000
Manifest next update: Sun 27 Jul 2025 20:01:02 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: x/i4l64hEJVybmrmnpzWhc9d0mToZdaeTYsM+WIyvck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1a:3e:68:6d:ec:ab:df:c0:a2:0a:46:19:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jul 26 20:01:02 2025 GMT
Not After : Jul 27 20:01:02 2025 GMT
Subject: CN=4d61a3d7f4add2a9fa060a2fab3dc0defe4ecfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:e2:b9:8f:2b:b4:62:be:6b:0d:e9:59:0f:
26:31:15:3a:bd:c3:ca:6e:e8:d7:83:ec:1e:d5:47:
17:61:af:99:6e:38:c8:7d:09:d2:c4:84:02:c6:c7:
a5:3e:f3:1d:5b:34:3a:36:c4:e3:cc:d5:78:2b:af:
53:ec:7f:9e:9d:96:fc:f6:04:74:c2:c6:df:02:09:
f4:81:4d:e6:5f:bf:9e:73:8f:b5:d7:58:64:e4:3f:
57:96:30:99:d5:df:ea:23:6b:fc:21:94:20:c0:a8:
b7:38:0e:f1:2d:00:4f:d4:4a:f3:fc:6e:d1:6a:12:
3d:52:92:9f:a1:dc:a3:74:b2:7c:a5:d2:10:ac:18:
d7:16:ae:37:1f:3f:cc:38:d8:df:37:27:35:27:16:
d7:26:15:da:e4:c0:8e:f0:91:2d:4f:03:ff:d0:34:
d5:72:78:20:56:da:13:6f:6b:db:5c:61:55:cb:9c:
75:35:c6:4e:c9:df:f1:45:95:25:f2:57:2f:34:1e:
b0:9b:ac:bb:c2:43:7a:4d:97:3c:33:21:6f:96:af:
a2:8a:0d:04:66:b7:45:d7:14:5d:7c:c7:cd:4a:c9:
0c:8e:5b:47:75:0d:a5:2c:e4:59:f0:d1:fe:1b:bc:
f7:5d:61:0b:1f:11:02:4a:cc:f7:5c:e0:1f:15:8a:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:61:A3:D7:F4:AD:D2:A9:FA:06:0A:2F:AB:3D:C0:DE:FE:4E:CF:EE
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:75:41:06:7f:b1:b4:6d:36:52:61:c0:65:00:1c:12:87:
0c:25:30:d8:6d:fd:f1:28:49:05:5e:cc:67:25:bd:2c:8f:b6:
4f:f1:61:81:c4:99:48:0c:70:a2:c7:43:5a:45:e4:65:d4:ea:
b4:33:d0:e4:60:f9:9e:35:95:93:ad:98:9c:25:6d:5a:59:1e:
59:dc:42:a6:c8:dd:3e:9b:48:d6:0a:e1:2c:ab:e9:82:08:9c:
56:3d:d2:80:a3:14:80:9a:5f:0b:15:8b:0d:15:97:45:d9:b9:
19:9b:88:12:29:83:49:bf:b9:7e:0b:18:dc:ec:a7:b7:5d:b6:
6f:74:65:45:58:66:0d:d0:c6:43:9c:d2:8c:da:0e:e8:bb:de:
39:1e:85:fc:03:f6:fe:4b:5d:48:e5:0a:45:0c:23:cc:64:63:
5f:45:c2:86:7d:8a:4c:9b:07:5b:b8:81:e4:88:15:56:1d:22:
35:f5:c8:23:67:5b:81:6e:73:f6:0d:7c:b2:0b:9c:4d:24:f1:
45:0a:13:28:0a:fc:82:28:3c:7f:01:83:3a:0c:71:f9:19:40:
51:26:55:61:07:64:f1:3a:7f:cc:88:d4:67:4d:69:e9:ea:f9:
48:ac:52:da:6c:a9:7c:8b:bc:4e:62:1d:ae:46:dc:ab:24:5a:
87:44:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:13 2025 by rpki-client