Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: J4uk3RRfQIi4mMkYq6urAMCGC/vyKdiTj0NCfbBnu84=
Subject key identifier: 54:34:41:CE:26:4A:32:F7:25:75:1C:4D:7F:F9:8B:9F:38:2E:F8:7A
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0198500BF20D8864BE7862CE03EEF79C6DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 04E2
Signing time: Mon 28 Jul 2025 08:00:16 +0000
Manifest this update: Mon 28 Jul 2025 08:00:16 +0000
Manifest next update: Tue 29 Jul 2025 08:00:16 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: Vz6xrnMRk+XTfwIX3TOqQ4BshkY4pPjwb63Kwp6ECHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:0b:f2:0d:88:64:be:78:62:ce:03:ee:f7:9c:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Jul 28 08:00:16 2025 GMT
Not After : Jul 29 08:00:16 2025 GMT
Subject: CN=543441ce264a32f725751c4d7ff98b9f382ef87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:28:07:65:96:a3:4c:45:a5:81:cf:43:a9:
a0:f9:ae:8a:58:a7:c5:e6:dc:a8:ab:89:bf:1e:e4:
4d:92:7c:7b:d9:b4:54:45:eb:ca:30:35:8c:0b:68:
18:f1:0b:42:ec:c8:10:0f:0e:98:05:2c:44:1d:11:
10:eb:bc:7d:18:aa:fc:c2:51:0f:87:60:32:dd:a8:
e1:44:29:38:b5:ae:88:66:d5:fa:60:1e:fd:49:69:
00:15:e9:0a:6e:7c:da:2d:1c:28:52:be:3f:bf:2c:
e1:29:4a:cc:8e:2b:39:55:be:67:9e:a4:81:6a:bd:
f4:28:50:11:2b:66:2e:70:8c:72:33:40:61:5b:c7:
53:c6:be:6a:93:7a:99:c5:76:ce:71:70:46:25:ea:
00:1d:81:fc:fb:3e:75:80:e9:a1:de:e1:d2:76:9c:
d8:b3:8e:56:7c:d0:ce:d4:b3:44:95:82:86:6f:51:
73:b2:12:f9:ed:b0:50:92:a5:89:c9:28:ee:b1:b0:
23:5b:ed:27:dc:f4:0d:6f:6d:b7:38:c2:8e:ea:66:
9b:8e:0f:fa:c0:45:36:57:5f:64:7f:86:31:fe:e0:
93:f0:54:c5:2c:36:9a:96:ec:50:ae:5c:18:ce:ef:
df:5e:03:59:74:c0:07:e5:bd:20:e8:d9:d8:ec:de:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:41:CE:26:4A:32:F7:25:75:1C:4D:7F:F9:8B:9F:38:2E:F8:7A
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:1b:bf:dc:0d:9d:f3:88:79:bb:54:e0:4b:6b:95:aa:43:
92:56:6e:3b:91:2f:9d:51:85:fe:44:90:76:46:45:ff:c4:27:
f8:3e:c9:b3:e6:bc:a6:6a:3e:fb:37:ad:79:89:df:79:77:fa:
bc:dd:03:18:7a:90:a4:c5:49:95:78:e3:02:91:9f:86:7f:8c:
35:f1:91:50:14:58:b7:06:9c:bf:59:97:74:fd:b9:92:45:7e:
c0:e0:39:5b:06:2f:9a:65:17:cd:af:ec:e7:93:a7:5f:dc:de:
1c:f1:c2:e3:7c:9d:20:4d:58:ff:72:33:24:d2:03:ea:99:36:
d3:76:d7:a8:ce:97:86:8b:bb:9f:1c:3a:40:1b:00:19:16:3d:
9c:00:95:dd:bc:de:99:20:77:14:04:fb:c2:95:68:2e:71:e8:
87:95:3d:02:fc:1e:fb:4a:05:cf:8a:7c:3a:93:80:2a:41:8a:
f8:c2:0b:2b:78:c5:b7:81:27:e1:97:a3:5d:36:56:9f:1a:22:
fe:d2:a5:f0:17:97:3c:24:2d:dc:32:2d:3d:bd:89:b8:e8:79:
04:49:5c:6a:76:5d:24:39:45:c8:e1:cb:f1:fa:72:95:77:c4:
92:5d:df:d8:b9:2f:0b:bf:fa:d6:f9:df:8a:77:d8:20:17:84:
d6:5f:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 16:29:06 2025 by rpki-client