Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: 367QHwKEH7/xf3wAswtu1HY7xooEquoPFkZTj8mvX1g=
Subject key identifier: E7:B9:2A:8C:BE:75:8B:8D:3F:C5:78:7B:A1:38:7C:66:A4:0B:E5:71
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019936136F54FB2AEB529E87B30D14297E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 00:01:07 +0000
Manifest this update: Thu 11 Sep 2025 00:01:07 +0000
Manifest next update: Fri 12 Sep 2025 00:01:07 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: FcD4I+Awc+lPiCDy0adYX3YXgOhpSHG7u8qTJORZT5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:6f:54:fb:2a:eb:52:9e:87:b3:0d:14:29:7e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Sep 11 00:01:07 2025 GMT
Not After : Sep 12 00:01:07 2025 GMT
Subject: CN=e7b92a8cbe758b8d3fc5787ba1387c66a40be571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:78:6a:4f:59:c7:1a:ec:5f:94:b6:c9:61:
5b:27:a7:08:69:5e:53:39:ba:19:2d:bd:57:0d:d5:
5c:2d:bb:ac:99:90:ee:a8:74:34:19:81:16:f3:1e:
55:3b:af:c1:64:94:06:f9:b7:19:17:ff:f9:b1:f3:
fe:6d:1a:eb:3d:c6:7f:d5:de:9c:a7:13:5f:33:ed:
c9:e9:4a:9f:e6:c2:70:68:8d:47:23:7f:db:10:b9:
8a:6d:c6:22:94:6c:dc:bd:37:79:91:73:30:aa:3f:
4a:c0:b8:96:71:35:23:08:4e:ea:72:fc:b0:d7:8d:
ef:41:08:c9:4f:fd:51:2f:c9:db:68:25:9a:42:9a:
6c:10:4c:d7:13:26:57:56:cf:b9:36:d6:37:ed:15:
aa:e3:71:5e:da:ef:f9:bf:6a:b4:8a:ac:06:13:d9:
ee:36:11:96:43:f7:82:b3:47:f7:a6:43:a3:14:43:
38:8a:e8:f3:ab:f7:1c:2c:95:f6:f1:cb:ab:6a:d6:
89:ce:c6:36:79:7e:bc:02:a5:b7:6b:10:b3:a7:66:
e0:42:53:cf:9e:e5:4e:99:31:e5:0e:43:3a:44:83:
de:f2:30:13:31:ac:06:71:4b:2b:e3:6e:b9:8d:c8:
4f:a5:21:44:93:bd:b4:29:a1:fd:22:43:5c:ed:28:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:2A:8C:BE:75:8B:8D:3F:C5:78:7B:A1:38:7C:66:A4:0B:E5:71
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:f8:7c:9c:26:03:9f:3e:f2:12:16:2c:08:68:00:da:02:
29:81:16:5b:4e:ca:3e:8c:ee:4d:05:20:8d:94:db:4b:fd:ef:
d2:31:c0:f2:14:63:04:b9:20:89:7b:72:96:1e:31:72:62:a0:
80:d8:19:2c:1f:6f:36:32:be:5d:99:5b:de:b2:b5:bb:c2:5a:
1d:c9:e6:93:d9:24:24:a5:ee:c6:a2:3a:af:c8:4d:67:33:18:
be:92:c7:19:93:69:c1:a9:c5:63:5c:b0:d3:ca:f2:db:b9:6f:
d8:b7:a7:c1:bd:1b:56:60:31:f3:24:7b:f7:35:56:a1:f1:d0:
e4:20:9c:52:aa:dc:e6:6f:34:4f:28:b8:8e:86:ee:c6:f0:21:
8a:40:2f:63:5c:0c:99:6c:29:1a:1c:d5:8e:aa:af:ac:f5:ab:
a3:e3:94:b8:e2:30:9f:c5:2b:17:08:dc:9e:98:ec:c5:ec:68:
d8:40:b5:ac:e1:00:df:c6:f9:31:76:c5:3f:2e:63:72:ec:72:
39:f2:19:91:de:01:f0:98:3c:48:4c:4a:61:64:de:62:b6:be:
64:0d:a5:9f:e2:53:67:a3:a7:9d:33:61:3d:2b:4c:93:cf:bf:
7b:a8:81:67:da:9a:84:b9:d1:9b:ee:08:bf:4b:ba:81:a2:02:
bb:15:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:05:13 2025 by rpki-client