Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: Fkd0pFaYNx9AY2zAUa/EYJRyTKkNrPXunZYs63B/3xM=
Subject key identifier: 3B:69:EA:10:E9:75:15:93:F9:3A:2E:3F:F5:AB:56:C6:0B:D7:05:54
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0199172D50EFC07B10507069255E052A89B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0477
Signing time: Fri 05 Sep 2025 00:01:09 +0000
Manifest this update: Fri 05 Sep 2025 00:01:09 +0000
Manifest next update: Sat 06 Sep 2025 00:01:09 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: ddqt5iDaw5MZvi+OCk3Y3SHTWVL0rTQSP35JIvNLgy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:50:ef:c0:7b:10:50:70:69:25:5e:05:2a:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Sep 5 00:01:09 2025 GMT
Not After : Sep 6 00:01:09 2025 GMT
Subject: CN=3b69ea10e9751593f93a2e3ff5ab56c60bd70554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:93:4a:79:89:a7:e3:30:48:85:2c:07:ba:
11:3f:97:a1:d5:42:17:69:fe:1c:04:44:09:af:7b:
e9:4f:60:1d:85:58:af:df:f3:ec:4b:99:24:5a:9e:
63:60:92:43:55:8d:13:a3:04:23:0b:5e:fe:da:d6:
a1:33:6d:dc:41:e9:f2:5f:b2:04:71:25:28:b6:4e:
84:4e:2a:99:9c:b5:a9:ca:0e:00:9b:32:2a:e1:77:
bc:b7:32:10:49:e8:5c:b5:a6:38:38:bc:f3:e6:70:
84:21:7a:89:53:7d:86:1b:27:55:b7:d1:86:23:61:
16:b9:6d:5c:1c:eb:70:be:61:60:b4:db:93:22:1b:
67:e9:f8:d6:d8:06:c7:8c:58:84:56:43:63:b7:38:
da:79:da:cd:09:9d:03:6c:b6:e0:6a:bf:e7:64:d5:
f2:8b:d2:c0:b0:bd:cd:cb:fd:ad:7b:98:70:a9:dd:
86:d7:dd:ee:95:fc:8b:75:7f:1e:0c:21:44:17:bb:
75:6d:c9:11:e9:15:e9:3a:a7:8c:c8:96:56:bd:5b:
f3:db:9f:1f:e5:44:d2:d5:5c:12:ed:5f:74:c4:e2:
30:f8:d1:12:55:3f:08:fc:fe:b1:94:9b:60:58:b1:
81:42:ea:40:0c:af:e6:b5:05:04:52:a4:01:51:90:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:EA:10:E9:75:15:93:F9:3A:2E:3F:F5:AB:56:C6:0B:D7:05:54
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0e:44:bc:f6:c7:74:b7:87:3c:4e:8f:7e:4c:57:42:c0:a9:
cd:48:73:7d:70:6b:e5:2f:93:23:58:a5:89:f1:4d:f3:33:25:
ce:a8:8c:95:55:1d:4f:37:5f:2d:26:ed:a0:af:f6:4a:f9:4b:
c6:db:d9:f8:54:0d:b9:c8:0b:7d:5f:d7:bb:3d:d7:c2:f1:02:
d9:d7:03:6d:14:cc:03:1d:31:ee:00:92:fd:e8:5a:e8:cd:b4:
e5:27:3b:f5:e9:c7:8a:7c:ab:29:f4:f5:81:4c:b0:61:7b:7b:
18:ae:7a:a6:c3:f2:25:d4:a6:ce:8a:71:fa:62:5c:2b:b6:b1:
dc:8b:d1:fe:02:2f:ce:2f:20:80:35:3f:64:79:20:7f:35:ac:
2c:80:b4:c1:b7:25:06:fd:d3:99:7a:ec:98:df:5f:3d:80:6c:
b3:37:db:4f:47:6f:6b:22:46:17:ee:0c:6f:bb:bb:a1:96:d0:
0d:67:11:98:22:7c:10:aa:57:10:81:ea:70:cc:69:a0:08:ec:
a0:ce:cf:9c:01:21:8d:6f:d2:68:54:0e:25:35:65:52:dc:ca:
c8:64:b5:69:c3:9f:a0:3e:b5:5b:00:a7:b0:5c:5a:22:7f:14:
c8:74:b2:89:e9:32:fa:0c:cd:c8:f7:a6:37:58:36:57:25:5f:
82:75:ff:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client