Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: BCA+aBDhMEGy2MxWwpEz2WVuJAdURrIfCLalJ4BYjys=
Subject key identifier: 54:50:2D:8E:5D:A1:2C:10:78:3F:F9:8A:F8:28:F8:20:A1:4B:FF:84
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01985DFED07063F2D3ACD80624A5F61FB8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0ECE
Signing time: Thu 31 Jul 2025 01:00:37 +0000
Manifest this update: Thu 31 Jul 2025 01:00:37 +0000
Manifest next update: Fri 01 Aug 2025 01:00:37 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: m3U0oK2gLqVQ2rj+BCxUz6r1vAgOXXFZ2SaNO80CliI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:fe:d0:70:63:f2:d3:ac:d8:06:24:a5:f6:1f:b8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jul 31 01:00:37 2025 GMT
Not After : Aug 1 01:00:37 2025 GMT
Subject: CN=54502d8e5da12c10783ff98af828f820a14bff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:4a:f5:1a:0e:f9:61:4b:85:d2:6f:a5:33:
90:61:b2:4c:33:09:7d:65:e2:18:cb:ff:b6:79:ce:
c0:45:1b:46:f6:69:a6:fc:14:30:80:0a:19:3b:8f:
45:e2:30:4f:39:f3:7e:d8:53:ce:90:ae:21:91:1b:
12:a2:ba:70:f0:c2:85:f7:9b:85:7e:81:71:91:a4:
41:98:39:9c:3d:7c:31:14:0c:d0:d0:e8:6b:c5:b3:
98:11:40:e7:f2:f4:5c:3f:f8:d4:5c:bf:b3:05:ab:
fd:89:9f:c0:96:4a:e4:5e:64:4b:a2:40:bc:95:ef:
36:f7:39:e6:93:c6:e4:27:6a:36:47:ac:03:7e:22:
06:94:9f:46:a7:b2:e2:44:51:2e:30:21:9a:67:27:
14:e7:f6:19:08:8a:2f:cb:c4:f2:93:6e:56:e9:e1:
a9:70:48:2c:ac:9a:20:9d:07:37:48:38:47:45:da:
68:94:b9:d0:ac:f4:04:79:73:6c:84:b3:f5:6b:4b:
c0:e4:8a:ac:24:2f:77:f0:60:a1:06:96:94:58:cc:
c3:9d:ce:28:18:df:23:76:f1:bb:b8:be:c4:6a:54:
67:1c:6a:75:b3:b2:28:59:8d:b1:f5:f1:e5:c5:a3:
25:df:bd:6c:d8:51:28:bb:23:52:52:2c:bb:67:06:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:2D:8E:5D:A1:2C:10:78:3F:F9:8A:F8:28:F8:20:A1:4B:FF:84
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c0:14:f5:0f:68:e9:0e:e5:c2:bc:24:ef:a2:e4:6b:dd:8a:
e5:1e:03:eb:10:1b:18:5b:57:6f:60:08:ff:11:7f:53:c4:0d:
a4:f0:66:fb:aa:fe:14:93:a8:50:24:f4:10:a3:2f:f1:ae:d6:
70:8c:b7:0a:01:69:53:b9:df:f7:b6:6f:5c:c2:bb:00:8f:df:
e0:e0:4c:5f:33:f3:64:75:db:ae:a9:46:f7:90:e8:ea:b5:01:
46:fe:05:c6:fb:75:f6:e9:ab:7c:76:60:7e:7b:aa:1e:24:56:
4d:04:b7:a9:7a:15:07:bf:65:93:ce:e7:6a:19:67:7f:ae:b9:
cf:96:61:63:6d:00:4a:48:47:63:67:01:3e:d8:08:b5:45:a3:
f6:d1:75:d8:bc:6e:a1:0d:f4:51:7d:ca:1d:a8:7e:14:09:66:
a1:fc:a0:b5:28:52:29:65:9d:c9:57:2f:b6:51:47:eb:15:eb:
1c:fc:49:89:4b:ed:3f:a7:50:e5:3e:cd:69:98:37:61:8e:38:
cb:81:9b:10:cc:82:c1:56:b7:b3:18:95:0e:d4:04:46:c4:61:
21:ab:b6:b9:30:0c:2b:db:67:b5:32:10:b7:d5:65:de:76:3b:
27:24:15:ce:d8:b9:62:d3:ca:31:90:d1:d8:98:da:01:95:92:
9e:9d:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:50:04 2025 by rpki-client