
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: Ib2tMEGPE7HTiJEQHzIfKZK3vngAK7KPSlnwWTV/+68=
Subject key identifier: 52:04:74:00:A1:8D:60:86:14:8F:04:99:B5:70:52:2A:AF:2F:7B:37
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 0198D5BB8FFBFE51B77C31933E53505105E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: Uu6+iLoXkrmH0goSjTGMd5puPW6J3UXgKtGAlZNQCFs=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8f:fb:fe:51:b7:7c:31:93:3e:53:50:51:05:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=52047400a18d6086148f0499b570522aaf2f7b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:d1:55:7b:51:32:8d:af:59:14:9d:84:18:
95:9d:e8:e1:5e:73:44:5f:33:b9:ee:3d:5e:d8:40:
6b:79:6e:88:94:da:dc:28:c8:08:12:0b:05:f2:9a:
a5:57:84:77:92:c5:2e:28:9a:91:36:25:ee:b2:1a:
e2:a3:ea:f7:b5:6e:fc:0a:71:1e:06:2a:8d:a7:55:
de:04:24:65:f4:30:e9:07:c6:47:b2:25:32:ee:61:
0e:3a:e1:f5:a5:b4:a0:d7:33:74:4f:c6:02:94:48:
c3:7a:f5:28:e3:e3:f0:23:e7:99:ed:24:57:78:1d:
4a:41:0c:02:11:96:92:1d:23:15:3b:0a:b8:7e:da:
1d:8b:3e:6c:d5:1d:92:a1:ff:9c:03:12:14:88:67:
cd:6a:65:fb:f7:47:ec:7a:59:33:44:6d:ea:56:21:
84:e6:ad:b0:62:8b:5c:59:37:d4:d2:31:07:62:89:
db:d1:02:11:e5:8b:25:52:b7:18:1f:74:22:86:3b:
78:7e:64:82:ad:ae:56:21:07:9b:61:37:34:30:52:
3c:78:e4:05:d8:80:10:d5:11:29:e1:91:67:2c:42:
1d:b5:21:40:2c:75:ee:0a:14:47:1b:23:91:26:85:
7f:0f:19:d7:a8:b5:5b:58:ad:5c:2a:fe:df:09:e7:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:74:00:A1:8D:60:86:14:8F:04:99:B5:70:52:2A:AF:2F:7B:37
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:fc:09:00:0c:40:c7:63:7a:6e:f9:18:3b:f3:24:01:c6:
0c:f2:32:b4:59:2a:04:2c:c2:d1:55:e7:50:72:7b:22:e2:26:
dc:dc:89:9b:fd:d5:68:b3:ea:ef:0b:a7:f2:b7:46:a1:e4:82:
c1:66:1a:a9:9f:20:fc:fb:81:5a:38:0a:0b:b5:4e:00:6c:bf:
c7:26:ab:b2:08:ab:a0:7c:34:96:6d:1c:b2:f6:cb:85:c7:6b:
17:dd:6c:0d:53:d5:db:ff:db:8b:43:2a:e2:af:ac:aa:31:b0:
03:bc:f1:e5:39:50:35:2e:58:1d:d3:29:06:ad:95:3d:05:5f:
b0:42:12:5c:2c:88:5d:9f:a1:d7:83:d3:35:f6:f4:6a:ee:92:
47:e5:44:e4:30:04:41:e5:1f:8e:c7:5e:0d:10:41:ca:6e:85:
5c:37:51:1f:b5:3e:2c:25:43:a4:6f:72:81:c0:04:be:ef:f4:
5c:d4:67:17:6c:b3:97:b3:66:f2:e1:d5:d2:42:09:5b:7f:27:
38:1a:f5:9f:9d:d8:d3:bd:d1:1b:95:9d:d3:ec:8e:53:3c:4e:
37:e9:d8:f7:92:81:8d:06:b0:4d:7c:5e:7e:1a:44:2e:36:72:
bf:9e:29:ed:d8:c9:24:a6:71:8d:60:a9:56:06:9e:e7:e9:c9:
73:5d:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:43 2025 by rpki-client