Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier: VecKAasZmUK5OTmIXbsbfvSrySbK3OjyQoUpMfwEJWM=
Subject key identifier: D7:57:16:B0:80:A3:DA:AD:8A:7F:55:77:E7:4F:47:2B:F9:16:DF:60
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial: 019922C32F6C07674334E87611FC8E4A4646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: ecmGTLNspJnifmPRbEVusibh7YatB+5YBU7+xAq+oJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2f:6c:07:67:43:34:e8:76:11:fc:8e:4a:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=d75716b080a3daad8a7f5577e74f472bf916df60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:35:8c:01:e9:f0:ef:ad:51:36:4f:67:78:
fa:27:26:92:56:29:6c:b4:c6:62:06:b0:b9:15:a1:
cb:58:67:ca:ab:dc:72:ed:95:43:6e:90:83:57:c3:
bc:80:c1:6d:07:e7:03:4e:37:bb:ba:4b:30:e6:f7:
49:7e:a5:af:51:3b:6d:59:99:89:04:de:99:33:5b:
db:d6:d5:47:ed:2c:60:17:68:93:aa:f1:8c:cf:68:
cb:04:f6:4c:25:c4:e4:01:65:41:84:81:c6:93:b1:
1a:f7:3f:52:63:4b:b0:72:43:1c:cd:a6:f7:e5:3d:
9a:df:b8:8b:67:b8:94:cf:2c:d8:b0:f4:14:8d:08:
0c:95:c0:cd:da:37:3e:75:ed:3e:f8:f1:de:3e:d4:
36:c2:ea:b5:6f:94:04:fe:84:8f:c6:90:23:e5:87:
6f:7f:dc:3a:05:fc:10:fc:53:5a:a9:3b:0e:7a:fc:
05:af:df:5f:92:ae:3f:a4:c1:a2:4a:3b:0d:dd:f9:
f3:5b:1d:f0:53:a7:53:d6:00:de:8f:2d:2e:4f:df:
63:a6:f3:3d:b8:a6:52:f2:e5:7c:9d:99:c0:0e:8e:
9c:a3:d3:b7:35:b3:8c:9d:99:59:d3:a8:ed:36:ca:
38:ce:e8:b8:af:4a:25:cd:b6:b0:71:82:25:fd:70:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:57:16:B0:80:A3:DA:AD:8A:7F:55:77:E7:4F:47:2B:F9:16:DF:60
X509v3 Authority Key Identifier:
keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:26:e4:91:8b:0d:5c:9b:c4:3b:06:04:e7:77:48:8b:a7:d9:
41:62:1f:2d:1d:a6:ad:fa:7d:98:12:7f:9c:c0:37:96:d4:fc:
f3:de:c0:2b:2a:66:83:bf:f5:7d:d3:80:32:57:33:e2:24:29:
f6:7a:4b:b7:4c:93:ea:cb:90:dc:e9:76:d0:34:96:83:6c:34:
93:16:08:50:96:ef:75:82:af:d6:29:0a:91:01:aa:1e:57:c1:
14:46:06:37:f6:36:53:66:aa:e3:78:e4:4e:b0:d3:eb:6d:05:
1e:71:ae:fb:5c:6d:dd:89:34:61:5c:8e:4d:b0:f7:7f:ce:4a:
a0:74:62:7a:5b:c8:e9:b9:0e:a6:44:a7:79:9f:0b:c2:00:a7:
42:4e:40:1d:7f:6b:e2:7e:98:31:ba:4c:80:c1:3e:34:42:d8:
b9:e5:de:f3:f5:e8:32:f2:8a:33:f0:6b:cd:00:48:e9:a9:78:
c5:62:71:bb:58:3e:7f:a5:df:2c:85:98:e8:17:8d:72:51:62:
ab:aa:80:be:ee:85:4a:3f:5e:30:3e:9d:ac:79:fc:c6:ce:7f:
cb:a4:2d:01:35:47:b1:f1:85:c2:ce:af:1c:dd:62:0f:b5:7e:
a6:23:60:5d:37:f2:85:4e:45:4e:ee:d1:e0:31:61:d9:84:db:
8a:c0:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:37 2025 by rpki-client