Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: 8sGyxC9wHU/ZrVFAttJLXxdMYlptJVYofqToZjE8CLM=
Subject key identifier: 64:54:D2:27:7E:21:5F:D7:0C:54:DF:4E:9E:9A:7C:D5:FF:A8:C7:24
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 019922C2FDE2B6BED3CCEC3BC5BFC7BEC446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:28 +0000
Manifest this update: Sun 07 Sep 2025 06:00:28 +0000
Manifest next update: Mon 08 Sep 2025 06:00:28 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: WsijVoTES95ThspEmPwGUAPXA7g0NY1WdBS3+VLROEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fd:e2:b6:be:d3:cc:ec:3b:c5:bf:c7:be:c4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Sep 7 06:00:28 2025 GMT
Not After : Sep 8 06:00:28 2025 GMT
Subject: CN=6454d2277e215fd70c54df4e9e9a7cd5ffa8c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:46:3d:3b:e6:46:04:8a:7a:ea:dd:63:d6:
71:11:eb:bc:d6:28:e1:64:4a:3a:07:fe:9f:1e:df:
b5:d4:d3:90:8e:1b:ee:55:b8:2c:25:50:9d:c7:c3:
c3:cf:ae:fb:ce:40:a7:b8:98:41:93:35:21:16:60:
9d:71:b4:fb:00:fd:9f:c7:e4:be:15:e1:66:3a:1a:
37:d5:63:b2:de:d7:79:fc:f7:43:a4:db:9b:3a:5e:
8a:42:a4:8a:5d:95:15:85:02:ce:9c:94:84:87:ca:
ba:fa:39:de:41:e4:0b:7b:36:bb:d2:f1:a8:63:0d:
0b:88:1d:97:4f:1d:80:29:fa:2b:4a:fc:d8:5e:a2:
7c:ec:ed:44:2e:8d:8c:44:3c:db:54:f5:f3:03:e5:
a8:70:65:34:d7:dd:e7:ab:20:48:ef:58:72:25:04:
50:df:a9:36:0d:2c:c0:89:99:11:30:30:ab:2e:3c:
e4:57:3e:0b:11:31:2a:b6:51:7b:64:c1:57:b1:bc:
cf:d6:a0:f1:76:00:5c:86:56:7f:bc:85:9e:fe:48:
b7:3b:1d:42:12:0b:e8:ee:2f:c9:57:a5:f5:7c:e4:
24:a0:b9:bb:b3:4d:e8:4b:18:92:60:00:51:c0:5b:
15:ef:3f:21:4d:a4:2d:f8:fc:5b:68:c2:b8:c8:75:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:54:D2:27:7E:21:5F:D7:0C:54:DF:4E:9E:9A:7C:D5:FF:A8:C7:24
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ba:78:27:fc:7d:01:6f:8d:eb:07:e1:f2:d7:65:85:bd:b1:
4b:f6:72:cc:06:1f:63:a8:3b:9a:78:98:23:7d:39:9a:df:70:
9f:19:43:24:62:04:8e:07:01:0a:83:d8:a3:0c:65:63:6a:aa:
17:90:21:73:d9:b8:dc:05:fa:2a:85:80:0b:45:90:64:f9:c4:
62:4c:b7:78:2c:d4:7d:7f:8c:79:ed:20:ef:4d:eb:fe:30:e0:
89:a9:7a:36:fc:f6:7d:ce:22:27:35:5b:a3:27:00:50:fc:e3:
87:4f:a7:0a:b9:18:c2:55:ea:da:fd:f6:b3:fa:53:43:69:7a:
74:f6:2c:27:42:36:df:b9:d7:41:86:5c:ce:0c:ae:2a:84:13:
ae:34:20:df:4c:9a:4f:50:57:29:ff:ae:e1:0e:c9:b3:8f:46:
d9:13:52:4d:e4:a9:6e:24:93:8a:8a:20:b6:09:db:37:00:67:
a7:ca:e0:7c:bf:7a:0b:43:75:0b:de:40:5c:69:61:49:cf:5a:
66:b2:64:1a:0b:5b:87:a9:48:da:ce:df:f9:ea:63:25:23:e9:
f7:2a:85:5d:e8:bd:a7:0d:52:91:f3:3c:f4:95:f1:73:5c:56:
6e:19:c5:d3:7f:37:52:6d:e0:b1:40:fa:a0:fe:d4:21:4f:2a:
a9:ec:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:49 2025 by rpki-client