Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: obi+5Ht8yTU9Q0TJnmUfbf9JIrBmTtlhpR3Dza4ATwk=
Subject key identifier: AB:36:B9:87:DC:A7:1B:EC:D5:37:4A:5E:22:3A:6D:30:F7:42:29:40
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019933137382D956EAEEB36E0E11964BF2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 0641
Signing time: Wed 10 Sep 2025 10:02:16 +0000
Manifest this update: Wed 10 Sep 2025 10:02:16 +0000
Manifest next update: Thu 11 Sep 2025 10:02:16 +0000
Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=)
2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: rWJSGUpN0JRKvBNKGSNILUsNeNjmgURWa7v7M+72q/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:73:82:d9:56:ea:ee:b3:6e:0e:11:96:4b:f2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Sep 10 10:02:16 2025 GMT
Not After : Sep 11 10:02:16 2025 GMT
Subject: CN=ab36b987dca71becd5374a5e223a6d30f7422940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:58:b5:03:22:02:23:7a:9d:4f:c7:73:6f:
c7:5b:0c:ae:c2:e3:96:74:3d:05:12:1f:df:35:ed:
63:0e:34:7e:d4:6d:59:95:99:f4:6c:b9:3d:ed:57:
c3:e8:df:c2:fe:10:82:8a:c8:68:9e:df:15:3f:8e:
4b:45:48:bd:ed:ee:7d:bc:f2:a2:2d:26:c5:ea:4c:
2e:88:79:01:cb:cc:ce:9d:d9:a5:fa:95:86:c5:78:
62:73:24:43:67:2f:47:68:8b:dd:a5:3f:7e:24:9b:
1c:4e:c4:d3:03:07:82:19:63:33:94:89:39:64:cc:
bc:2f:b3:42:bc:93:f7:01:a7:04:17:9e:05:ce:47:
c4:a9:38:a6:dd:3d:5b:22:54:21:50:7d:94:1d:8b:
f3:9b:90:77:cf:10:4b:bf:7d:bd:fc:6a:e1:6b:7c:
22:e5:98:c1:6f:6b:9f:9b:34:be:c1:e8:1d:80:f5:
06:f4:0e:c3:d6:ca:5b:4c:3b:ca:4b:97:b2:c8:23:
a3:68:86:da:63:63:00:9f:64:be:7c:ac:6f:a6:98:
2d:2a:48:58:f0:36:34:cc:f7:15:23:e9:1e:ab:6e:
a4:cd:e6:c6:62:c4:c8:ce:a7:14:5f:83:cf:9f:59:
7f:33:e3:a5:e7:dd:8f:20:d9:ff:0a:29:48:e4:2c:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:B9:87:DC:A7:1B:EC:D5:37:4A:5E:22:3A:6D:30:F7:42:29:40
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0b:88:3e:b8:81:1b:0f:30:5c:3a:30:02:35:39:42:d1:53:
19:ee:69:55:f2:eb:ed:2a:64:4c:89:01:5d:75:b4:95:ff:37:
4a:36:3a:9f:96:77:59:02:c6:d6:48:d5:27:4c:c0:76:dc:cb:
3d:0c:28:d1:da:65:82:d2:01:06:d5:3d:e0:4b:da:db:a1:d2:
e9:26:f9:13:f1:84:96:9e:d5:42:7f:6f:d7:09:bf:e8:68:20:
ee:80:78:ff:0d:f9:99:b3:bd:1a:c1:92:a4:33:79:36:89:62:
30:e9:b4:03:5e:9f:b0:6e:6c:dd:7c:00:e4:22:a4:2a:81:ab:
a8:13:f6:d1:e8:f7:0d:da:e6:a2:91:70:8c:1a:0c:78:5c:68:
58:0c:3e:a5:9f:d0:8e:19:eb:a2:d0:7e:72:f0:26:e8:dc:b4:
46:15:4f:4e:00:d8:dc:1e:46:96:5a:e1:2c:f6:a2:ab:1a:34:
d8:b9:b9:16:5c:b6:53:d8:88:bc:a4:a6:78:2d:6e:ae:30:99:
d9:a2:f1:f7:8a:c1:4b:99:51:a7:c3:e6:47:43:8d:8a:b8:20:
de:c9:3b:5a:67:f1:8a:f1:fe:6d:05:fa:45:da:dc:72:0b:6a:
dd:fa:d4:3a:62:4e:8d:d4:a5:75:2b:05:c7:b7:be:aa:ef:4b:
d3:78:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:10:09 2025 by rpki-client