Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: RGe29o5jk6cULzLYzWkva45gUTISQ4tQlY9WvaVGzMc=
Subject key identifier: 74:2D:EB:23:5A:EA:0A:F2:55:C1:B3:38:B7:6D:79:E7:47:7C:7C:91
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01993492BEF5A243BD781CF8058C4C00F65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 17:00:56 +0000
Manifest this update: Wed 10 Sep 2025 17:00:56 +0000
Manifest next update: Thu 11 Sep 2025 17:00:56 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: OWqHnrKlcdBJ4OqjJ5c0xL9JiVC9fgdQKHzh+MD/6WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:be:f5:a2:43:bd:78:1c:f8:05:8c:4c:00:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Sep 10 17:00:56 2025 GMT
Not After : Sep 11 17:00:56 2025 GMT
Subject: CN=742deb235aea0af255c1b338b76d79e7477c7c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:2d:ec:e7:2d:30:fb:21:9a:d0:59:41:f2:
37:e3:b2:f5:f0:1b:fd:2e:d3:f3:a9:34:2e:a4:62:
9a:17:3e:e6:68:55:aa:7a:ab:0d:2e:41:27:15:94:
9d:52:26:4e:54:f8:e5:1a:ff:1e:a6:dd:a8:20:83:
ba:1e:5b:4a:f2:cf:29:01:56:61:ae:d9:98:fe:f7:
f4:67:4c:a7:60:2c:eb:5b:c3:2f:62:5f:17:b3:1a:
a7:42:61:1e:34:a2:2e:c4:69:10:90:1f:14:a8:c3:
dd:f5:24:cb:0d:b3:23:9f:c1:26:09:9d:5e:13:fb:
b9:26:31:8a:1a:f3:88:77:da:a7:48:be:fd:39:51:
b9:3c:e8:9e:c4:84:18:0a:d8:71:54:6c:ac:78:00:
03:d8:02:f3:3e:56:72:23:57:b6:a0:bc:2c:90:91:
04:6c:7a:68:5f:6c:2d:0d:48:0e:d3:26:d5:9e:0b:
7e:10:e8:ca:b4:66:ec:2f:c6:b5:40:42:84:61:f5:
64:bf:28:19:a8:df:c4:f1:d6:40:a7:62:05:a9:8f:
4a:46:f4:b3:71:39:99:46:6d:31:e3:7d:5c:3b:23:
b4:57:5d:39:57:1b:f5:65:bb:ac:72:5f:92:5f:a0:
e1:89:08:e0:8f:b8:e2:fd:67:d4:f6:0d:b9:a0:77:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2D:EB:23:5A:EA:0A:F2:55:C1:B3:38:B7:6D:79:E7:47:7C:7C:91
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:95:78:2a:a8:79:58:9c:e6:54:f6:86:29:90:1e:ca:8a:6b:
e2:37:7e:6e:8a:68:3e:38:3a:80:b7:d0:50:c1:6d:90:07:a5:
9c:c6:84:be:0c:cd:9c:e8:7d:cb:88:78:f3:4e:30:ae:f2:54:
71:89:00:d9:66:59:21:68:90:11:bc:07:09:ab:3e:14:e7:24:
e2:49:d3:78:82:c8:b3:9a:cf:33:82:aa:21:34:b6:70:5a:73:
51:d0:1b:bd:5c:83:13:49:8c:f5:84:9d:b9:21:10:d6:54:c3:
bd:92:a9:bb:6c:4c:85:d2:fc:99:39:a0:ea:08:21:79:49:2f:
6c:67:b9:65:d3:00:c1:e9:a4:df:99:9f:55:86:13:7c:5b:7a:
4b:4d:3e:0e:e2:72:18:52:5f:14:9c:5e:3a:0a:ec:4e:a9:a4:
4d:ac:33:ce:23:b9:91:d7:2a:4a:fe:73:ab:fc:25:bd:48:14:
34:07:2b:e5:73:b1:25:0b:e9:92:6d:05:9d:35:b9:6f:5f:e1:
c6:27:d1:a0:5c:a9:21:ae:76:36:0a:a5:ac:69:61:6d:e3:31:
7e:bb:b3:57:de:c7:0f:36:10:e0:01:37:20:d7:0d:9a:7c:2f:
bb:00:d7:c5:1f:12:91:58:2a:82:81:bd:72:1a:2d:c7:7f:df:
67:58:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:55:46 2025 by rpki-client