Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: OgK6T9OcanAn/CK8U4EVV5f1nweo+NdkvFQvvEpmwmI=
Subject key identifier: 0F:F2:34:64:F9:FA:82:0A:45:3D:35:6C:BB:F2:BC:11:46:03:5E:65
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019933124B9F420493BFFFEDB66752D927D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 10:01:00 +0000
Manifest this update: Wed 10 Sep 2025 10:01:00 +0000
Manifest next update: Thu 11 Sep 2025 10:01:00 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: NilI2mJRLl7wkXEeRAMjSqfjvG5BSsq1fKi//wviSSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:4b:9f:42:04:93:bf:ff:ed:b6:67:52:d9:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Sep 10 10:01:00 2025 GMT
Not After : Sep 11 10:01:00 2025 GMT
Subject: CN=0ff23464f9fa820a453d356cbbf2bc1146035e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:a0:00:41:37:5b:27:6f:02:b5:a6:a4:46:
d0:85:60:f8:40:13:91:d8:0e:be:2b:95:55:e9:8b:
23:a1:4f:03:66:02:6b:33:20:dc:71:79:ae:a5:b1:
8b:98:99:18:60:a0:89:5a:ba:98:cf:4d:cd:8b:41:
b2:4a:f1:48:a7:d8:03:a0:07:4e:c7:42:7f:08:ea:
ba:6d:b1:da:4a:94:ee:7e:e6:5c:e8:95:ee:41:ac:
0a:b6:fe:49:d7:a4:fd:be:f6:37:bb:82:50:e5:0a:
40:18:e6:32:d8:f9:74:f2:0c:7a:dd:8a:17:8a:15:
bd:8d:30:f1:77:d1:7c:a3:8d:c6:7f:bf:a3:45:01:
b3:a6:00:49:2a:70:09:54:51:e5:63:04:eb:b2:a2:
74:d3:f1:b4:4b:d8:e2:71:88:4f:39:e2:b1:11:dd:
a2:66:a0:f2:bc:6c:17:68:86:3f:e6:90:eb:0e:8f:
6a:1c:0e:3b:9f:8a:97:7a:d4:20:8f:45:9f:89:65:
72:82:0d:92:95:ca:80:52:6f:a1:87:6a:99:ff:cb:
50:44:f1:f1:cb:4d:4c:80:d6:94:58:39:60:27:42:
2a:26:64:5c:8c:4c:18:7a:57:c2:65:a4:fc:7e:87:
05:48:af:8a:03:fc:61:fa:7e:26:71:a3:45:e6:04:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:34:64:F9:FA:82:0A:45:3D:35:6C:BB:F2:BC:11:46:03:5E:65
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:4f:a1:5f:5f:bc:e3:da:e4:34:66:f6:e8:de:41:af:75:
d6:05:cb:13:c6:9f:dc:20:45:ba:9a:9a:f8:e0:f5:13:ae:8b:
9d:2d:ab:e3:01:f9:12:36:d5:c8:c2:58:31:dd:5f:f5:91:94:
c8:05:ed:84:55:8c:5a:78:c7:b1:f8:bc:3d:25:45:51:b7:7d:
7d:2e:7c:a2:95:ff:d3:14:b0:d2:bf:01:f9:95:e7:10:6a:e9:
02:46:74:95:35:fc:4b:e4:b5:9a:4c:33:67:dd:39:63:69:49:
6c:99:99:94:fd:88:37:bf:07:4a:f1:ea:30:13:45:54:35:66:
d4:c4:08:e6:6d:2b:15:a5:a3:f6:f0:63:be:d9:98:3c:2e:b3:
af:bd:e3:c4:d2:24:dc:1a:b6:c5:86:e9:f0:b0:b5:b2:fa:70:
51:43:fa:5b:36:87:77:ed:82:01:a7:df:c3:30:3b:02:2c:2e:
99:5e:43:38:f4:78:d5:65:7e:73:1e:9a:a3:47:0b:9a:d1:e2:
74:3a:80:cb:85:cf:d5:8a:85:62:e5:3c:12:fd:b4:cd:80:cc:
c9:d5:fc:ef:ec:13:8d:7c:57:f0:cc:ef:a5:92:36:1c:2c:66:
b5:42:ea:d6:f9:0a:96:ff:29:5a:af:fb:81:f5:c3:5e:d1:7e:
e1:7d:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:27 2025 by rpki-client