Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: YILQqFclsiSd2Df1Ni1uMidfknUIh90cLMIzxjOZ7Ww=
Subject key identifier: CF:B8:C3:B2:EA:59:DD:9A:E5:E0:48:6E:80:52:3E:B9:0F:6D:AD:43
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 0199239F6BB34F1765FA356012C96953AE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:14 +0000
Manifest this update: Sun 07 Sep 2025 10:01:14 +0000
Manifest next update: Mon 08 Sep 2025 10:01:14 +0000
Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=)
2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: h7ZuxmobN3OIr/LygxQTNzcjaRc/O4B5CtWKWvIoflI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:6b:b3:4f:17:65:fa:35:60:12:c9:69:53:ae:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Sep 7 10:01:14 2025 GMT
Not After : Sep 8 10:01:14 2025 GMT
Subject: CN=cfb8c3b2ea59dd9ae5e0486e80523eb90f6dad43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:1a:a4:8d:7d:2c:c0:d5:fe:64:a7:c6:1d:
30:29:11:eb:42:7f:5b:9e:d2:18:7f:e3:f6:bb:67:
ce:a0:58:8a:67:4f:2b:da:68:91:96:39:42:db:98:
8c:0b:61:fd:dc:90:9f:b5:3b:29:88:f0:20:f8:bf:
b4:36:b9:17:a7:a0:b0:cf:df:94:37:1d:45:98:83:
5d:73:63:e2:5b:dd:f6:bb:39:76:98:f0:6e:ca:02:
fc:50:49:bb:96:b9:ce:16:2c:e4:93:b4:1a:fa:25:
7b:49:71:e9:2d:48:7f:23:eb:c1:47:fd:c8:87:0c:
d8:c7:6c:39:7b:29:6c:11:2b:48:33:8f:37:ac:6f:
c9:c6:7c:4e:ae:a1:95:2c:f6:40:b3:bf:84:fe:39:
32:c6:93:fc:b9:f2:cd:e9:d1:fb:d9:d5:d7:10:63:
3c:25:a9:3e:15:03:6d:1e:c5:75:33:52:ce:b7:88:
0c:97:d3:75:4a:71:ca:d0:2d:74:b3:71:6b:b2:fa:
8c:75:8c:36:a7:1e:59:3b:c1:c4:78:ba:5e:8d:d5:
1f:70:10:12:58:bb:5f:a9:a0:51:a9:ac:43:f5:76:
e8:ce:77:e7:36:fd:60:91:ff:6a:93:9c:c2:16:fd:
30:d0:eb:dc:07:56:3b:8a:4c:a4:cc:44:6d:5a:85:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:C3:B2:EA:59:DD:9A:E5:E0:48:6E:80:52:3E:B9:0F:6D:AD:43
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3b:93:a2:6d:87:ab:0a:86:8e:4b:a2:a2:6c:8f:25:14:85:
ce:12:70:3e:21:85:f9:c5:5a:fb:c3:dd:26:73:ef:04:1c:ca:
86:06:31:7c:db:da:32:89:ec:fd:3f:8f:a8:d5:e7:9b:64:17:
d4:46:0b:44:fe:18:01:57:56:56:8c:76:c5:80:ed:5d:63:32:
86:db:fb:e3:d1:aa:eb:84:0f:87:f0:95:10:e3:04:33:f3:f4:
65:ca:7a:1a:7c:04:df:62:b1:91:b3:35:94:2a:cd:b0:54:06:
8f:e5:7a:1e:61:60:86:05:e6:b1:77:04:59:a7:93:b9:a1:2f:
7f:40:54:52:30:38:86:f4:b3:54:8d:41:96:8c:03:93:8d:d7:
c6:fc:cf:bc:41:c6:5c:00:8c:a8:b8:d6:85:64:5f:10:18:3b:
13:04:98:f7:3d:c4:42:9f:46:1d:6a:6b:fa:12:87:90:d4:bf:
b6:fd:ab:c0:75:06:01:ef:eb:fc:43:b4:4c:91:0e:8a:a3:89:
a4:45:50:53:ef:97:be:89:c3:be:fb:cf:b6:a6:fc:ba:ad:05:
9b:2b:cf:f1:db:9e:ce:25:c4:07:89:9d:4b:88:bb:71:a6:ac:
26:3b:69:98:30:82:a6:f4:7b:4e:17:ca:11:03:6c:30:ce:47:
82:01:d4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:56 2025 by rpki-client