Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
File: kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json)
Hash identifier: XjCdFUw/Z5uAEfVhq1XLzv/lIbNWZOdZoICwMu/wBhs=
Subject key identifier: A8:9E:FC:46:22:38:0F:6C:D3:BB:B1:9F:D9:11:72:B3:58:3D:6B:CF
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial: 01993313D6F5775878BD3D7C90C76C90CD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
Manifest number: 0BFD
Signing time: Wed 10 Sep 2025 10:02:42 +0000
Manifest this update: Wed 10 Sep 2025 10:02:42 +0000
Manifest next update: Thu 11 Sep 2025 10:02:42 +0000
Files and hashes: 1: LZy1osNQUhfVUq7phinZnPKl6sg.roa (hash: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=)
2: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: 6JOWNxKCH+vpg2PzYj0sGsWvcY0QXcOrmUO+o/mjuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:d6:f5:77:58:78:bd:3d:7c:90:c7:6c:90:cd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Validity
Not Before: Sep 10 10:02:42 2025 GMT
Not After : Sep 11 10:02:42 2025 GMT
Subject: CN=a89efc4622380f6cd3bbb19fd91172b3583d6bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:75:32:60:b9:04:79:32:7d:4d:54:f6:aa:
7c:6b:96:75:24:cc:2b:dc:32:9b:4c:0a:ef:8f:76:
63:a7:66:b9:d3:28:65:df:4d:f2:82:83:d9:72:b4:
fb:95:b7:96:c9:70:75:d1:03:f2:25:c5:93:fd:d4:
5f:9b:2f:83:7b:3a:9a:61:c5:a3:0a:e5:ab:1d:43:
81:90:fa:bb:df:09:a7:a5:d6:f6:75:57:63:99:50:
cc:d6:11:f0:1c:cf:d7:ea:90:08:f1:8a:e1:20:5e:
c1:17:dc:84:2c:dc:45:b7:6a:08:ff:43:17:c2:0a:
46:05:cd:a7:81:93:44:f0:1e:92:b5:2d:ef:c7:3a:
c1:8d:29:c8:4d:0f:8f:79:ca:c2:55:d3:ee:25:bc:
ab:9d:f7:45:51:b2:70:57:8a:db:f8:19:21:a3:62:
69:ab:46:54:84:c3:2f:f3:78:e6:7d:9b:45:48:61:
c9:4c:71:da:19:9d:40:b9:ce:8b:ef:ac:3f:24:51:
2b:19:0c:a9:c7:28:ed:bf:83:61:5e:86:3e:7f:d9:
20:1a:45:50:b1:c1:2b:64:60:ca:b3:88:ca:5f:01:
d5:ea:5b:a6:9d:ee:22:de:79:64:62:25:5f:c2:2e:
25:91:49:fb:29:15:88:8a:9f:91:e5:be:7f:55:48:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:FC:46:22:38:0F:6C:D3:BB:B1:9F:D9:11:72:B3:58:3D:6B:CF
X509v3 Authority Key Identifier:
keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:e9:ef:b1:4d:d2:4e:e8:b0:d4:e3:fe:c8:d5:b1:9e:b3:
69:a6:4c:b8:dc:f1:bb:9f:b9:99:87:97:c1:94:fe:d3:53:05:
08:22:04:44:91:23:f8:a6:1b:fa:02:0b:16:a0:10:79:e6:59:
bf:da:7d:9a:90:4d:e8:5c:f9:ea:e8:cc:19:70:ff:cf:be:02:
ae:58:55:72:7e:0e:52:91:85:a8:43:ba:0a:80:ab:d7:8a:8f:
84:97:83:c8:37:4b:56:bc:95:2a:fd:1e:77:d1:80:e7:a6:df:
7b:fb:16:f5:4d:92:82:ed:2c:d8:64:a6:05:8a:05:3d:e3:bc:
76:77:67:ae:0f:10:df:a0:20:c4:6c:de:c8:dc:ed:b6:5c:61:
3a:60:84:9d:78:90:73:70:d8:16:49:9f:7c:e5:ac:fa:6d:e9:
d1:62:43:6c:cf:01:63:f5:0a:63:1d:37:40:44:4d:2c:db:e4:
5b:f1:80:28:1c:b0:6b:22:b0:9c:b3:97:36:12:a5:6a:55:00:
00:34:cf:92:9b:26:2b:a4:98:96:32:61:fd:27:7b:44:28:9c:
04:19:da:19:71:88:13:5f:d3:0f:e8:92:e5:48:48:b8:c5:ab:
41:ed:e4:cf:93:ee:68:8c:f6:d2:aa:78:3c:0a:2d:95:1d:90:
37:f2:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:55:56 2025 by rpki-client