Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier: UkJ8kMMrGBBnWT7DZk/uBT7swffPWlIj2ATV3MzGEpA=
Subject key identifier: 53:44:E6:E4:EA:37:F9:E0:01:33:1A:5F:99:35:1F:9B:77:B6:4D:D5
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial: 01993680A6C809855C3BFD2E2167526C71B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number: 0D5C
Signing time: Thu 11 Sep 2025 02:00:24 +0000
Manifest this update: Thu 11 Sep 2025 02:00:24 +0000
Manifest next update: Fri 12 Sep 2025 02:00:24 +0000
Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=)
2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: VQ6O4yk0Q06rP9Uv679EUboxWaJzW7KzMMnAW3IjCiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:a6:c8:09:85:5c:3b:fd:2e:21:67:52:6c:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Validity
Not Before: Sep 11 02:00:24 2025 GMT
Not After : Sep 12 02:00:24 2025 GMT
Subject: CN=5344e6e4ea37f9e001331a5f99351f9b77b64dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:45:00:14:75:8c:de:8b:ef:ed:fa:1b:3c:
c0:ab:19:b2:c7:b7:36:77:20:af:55:2f:21:55:1d:
41:df:94:0f:d1:45:d6:bb:58:e2:db:31:7b:5b:cf:
24:b9:c1:cb:fe:62:9a:bc:7c:48:b9:15:60:c3:6c:
89:44:9e:35:0b:f8:61:1a:45:0d:ab:e6:f3:e3:91:
87:a2:94:be:e1:f3:49:04:24:02:0e:3c:28:11:0f:
5d:16:61:8f:48:61:86:3b:0f:d4:70:44:75:c8:63:
8d:ac:df:bf:42:63:89:05:c8:0d:56:53:71:c4:4a:
84:e6:c1:b2:e5:09:31:48:d3:2c:63:de:26:08:38:
f7:67:b4:ca:bf:ee:6d:88:28:dd:27:48:43:b0:d5:
f4:d6:c4:bc:51:61:06:94:25:16:ef:0f:c8:48:21:
58:57:7d:86:37:60:9e:0d:35:76:5f:73:16:22:d7:
06:c8:5d:99:78:a4:de:17:f4:54:38:0c:d3:2d:e6:
38:b4:ff:c6:eb:72:b6:3c:4a:a7:40:4a:4a:c4:55:
0f:2f:9d:a8:cb:46:03:39:cd:de:05:10:65:3d:81:
08:86:0a:1d:1b:5c:9c:40:63:98:26:02:1a:8c:fe:
41:3e:d7:0e:a4:4a:25:91:99:fb:d0:0a:49:8f:63:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:E6:E4:EA:37:F9:E0:01:33:1A:5F:99:35:1F:9B:77:B6:4D:D5
X509v3 Authority Key Identifier:
keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:7c:60:43:f6:42:22:75:5c:49:6b:d4:49:7d:4e:87:ce:
d1:b1:23:8c:9f:bc:9f:ef:e3:cf:49:27:f2:54:5a:24:29:0a:
24:a4:0c:a4:15:13:b7:82:85:97:0f:d3:32:e4:c5:9e:bd:8a:
e7:f8:4c:2d:84:be:f4:ea:bd:5c:9e:42:1c:29:21:27:36:c2:
08:32:a2:d7:6c:0d:26:e5:17:c8:38:1f:71:49:67:b1:07:12:
98:5a:10:a4:13:3a:45:f1:8b:85:3b:5b:7e:6f:1b:9b:30:95:
fb:0f:2e:42:a4:c4:7e:55:ae:39:78:70:0f:e1:9a:fb:8f:61:
97:a7:71:d0:6a:16:c6:e1:44:ec:e3:72:82:3a:ef:7f:35:9a:
85:24:af:33:f4:4a:8e:35:28:41:91:03:16:0f:89:dc:37:ec:
3c:70:94:d1:c3:6a:99:06:e3:3d:26:33:5f:31:20:0b:bf:a7:
57:d1:ce:5e:1a:10:4e:da:ef:fd:de:2a:78:a6:0e:68:d8:2d:
ef:5d:32:a5:aa:b0:95:3b:5c:24:ff:2d:f1:e8:a7:06:13:0d:
5b:2a:a3:47:c2:66:2b:4d:02:1b:a9:3c:d8:39:00:5f:01:0f:
30:22:60:47:db:8a:80:c6:92:b9:c3:76:40:02:08:6e:57:e8:
21:6a:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:39:25 2025 by rpki-client