Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: OSZfc+sOfJYT+8Mm/X9/EZi9QIOifSffr6++TLRj7CY=
Subject key identifier: C7:BF:F6:B9:05:D8:04:05:7C:BA:28:B4:CA:51:D1:63:B0:C8:74:73
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019848F71FCE60F8B0AD96CC91342ACC26AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 23:00:11 +0000
Manifest this update: Sat 26 Jul 2025 23:00:11 +0000
Manifest next update: Sun 27 Jul 2025 23:00:11 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: 8Sd6H/+nb26MuJdcN3DmYhuZuHbw4E/Gpuv5kemeBgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:1f:ce:60:f8:b0:ad:96:cc:91:34:2a:cc:26:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jul 26 23:00:11 2025 GMT
Not After : Jul 27 23:00:11 2025 GMT
Subject: CN=c7bff6b905d804057cba28b4ca51d163b0c87473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:ac:12:f3:df:3e:0a:92:ae:40:14:92:69:
ab:58:6b:1c:71:48:6d:ad:10:8e:4a:50:a8:f5:69:
71:d5:44:57:07:a5:02:19:3b:2f:03:3e:de:83:e3:
6c:c9:f0:73:3c:99:91:45:24:f9:c8:be:04:cf:25:
39:bf:e3:b1:c8:f0:6b:51:73:fd:cb:bb:95:13:bc:
29:4c:fd:63:00:b3:2c:89:88:1a:b7:d7:ef:b6:16:
f8:ef:07:ca:67:64:b3:39:b6:38:75:22:49:a3:0b:
a1:f3:15:68:72:bb:17:5f:fd:2e:7b:a0:1f:50:71:
15:09:a8:9b:ef:97:27:4c:48:51:c4:37:d6:b2:ee:
a1:40:59:71:57:b6:ff:26:f6:9c:ce:65:03:6a:15:
df:1d:af:c7:33:c4:b3:b2:86:90:b5:41:8e:26:12:
94:61:4b:03:2a:79:cf:47:c1:73:18:5a:6c:5e:50:
54:fc:5b:01:90:d4:e5:98:ba:85:79:cf:9b:02:bf:
ac:93:74:bf:03:8f:8c:44:7e:b1:7f:23:d6:9e:8c:
88:52:62:94:70:a8:08:ce:94:34:23:e4:42:6c:23:
7b:f7:43:52:8b:99:40:8c:21:4a:04:45:9a:25:56:
bb:63:50:b4:6c:9f:01:2b:9e:16:67:d4:17:3a:09:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:F6:B9:05:D8:04:05:7C:BA:28:B4:CA:51:D1:63:B0:C8:74:73
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:e6:ab:2b:18:fa:5d:b4:9e:f9:ed:0a:1e:ce:5f:6d:77:
dd:c9:87:e7:c5:de:a8:13:ae:9d:84:e4:6e:00:79:63:ca:da:
d8:78:a6:d0:32:e0:0f:d6:c2:b7:62:81:a0:19:56:88:00:d2:
f9:9f:1a:b6:6f:a4:a8:5f:a8:97:b8:bc:86:9a:39:f6:67:4d:
a6:c3:c3:ff:e3:48:c6:36:c5:49:97:0f:ad:cb:f3:65:8c:19:
0f:8f:60:f0:83:94:21:5c:25:cf:f2:87:e0:0d:e5:69:d7:4b:
59:d8:12:7d:d5:55:8c:4b:16:31:fe:8e:f7:2d:e9:df:ad:d4:
93:5d:fc:d3:8a:e9:6c:2a:bb:4b:d6:a6:53:6f:98:fb:6e:74:
0c:61:86:ce:d2:28:a9:83:c5:02:0c:51:66:4e:15:8d:85:2d:
eb:ca:89:3f:92:9e:c1:3b:ac:e9:db:81:12:29:85:3b:83:38:
4a:a9:09:a8:59:bb:15:9d:08:52:59:0d:95:51:57:96:87:8d:
66:cb:38:c5:b4:97:34:61:8d:7b:df:52:06:c3:46:82:f9:98:
a5:63:a9:d3:25:61:fe:16:e2:43:84:47:f0:d8:79:45:57:fa:
e4:72:b6:cf:cb:ac:8e:3d:6a:46:9a:46:66:0e:48:78:36:81:
63:ff:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:12 2025 by rpki-client