Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json)
Hash identifier: 0H+AEztAX96LV1gLLLURmdg9QsO2SweQLrKyftdANEY=
Subject key identifier: 85:C3:80:42:90:30:47:08:D2:A6:D1:64:7F:9D:B3:AE:FE:59:5F:61
Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Certificate serial: 0197BF6CA91CC1C05E9872FC733777F2549E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 06:00:58 +0000
Manifest this update: Mon 30 Jun 2025 06:00:58 +0000
Manifest next update: Tue 01 Jul 2025 06:00:58 +0000
Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=)
2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=)
3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: cWJyP60NCzuwhZ+G7Lpo4WLxDunnGYP25IiAakY+HHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:6c:a9:1c:c1:c0:5e:98:72:fc:73:37:77:f2:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4
Validity
Not Before: Jun 30 06:00:58 2025 GMT
Not After : Jul 1 06:00:58 2025 GMT
Subject: CN=85c3804290304708d2a6d1647f9db3aefe595f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:02:03:21:9c:4c:bf:fd:83:11:f4:f1:ad:
79:81:5a:eb:e5:8f:89:38:26:f4:1b:fa:d5:be:7d:
5e:ff:47:0f:60:9c:54:bc:fe:f7:10:24:42:77:7c:
9c:65:ef:57:04:84:1d:92:e7:b7:d4:c1:81:cd:62:
d4:38:8a:ba:1d:6a:2b:de:7c:10:61:9f:f5:c5:59:
77:20:28:73:af:26:3b:3a:79:03:15:22:f2:d2:4f:
eb:29:7f:d5:13:87:a7:61:b3:f6:71:d0:40:a1:d6:
b0:83:be:24:5a:80:1e:51:1a:d0:d9:56:74:72:3b:
61:ae:67:c4:6b:5b:d5:aa:be:03:78:8f:ac:e8:3d:
66:22:18:f2:e2:2f:e5:27:bb:d7:9d:9b:bb:9a:8a:
f6:53:b9:30:87:b9:24:9b:3d:2d:fa:5e:28:e1:4e:
fa:e7:07:0b:6a:db:99:23:38:38:f8:50:24:6d:6f:
a6:b1:33:92:02:44:77:01:cd:9e:0d:2a:3a:52:54:
05:ce:cb:d6:40:7d:b9:ef:ee:98:8b:a7:41:9c:b8:
43:33:58:3a:48:41:53:1d:45:0c:f9:75:0b:65:ed:
de:97:d2:a9:56:9c:49:ae:d4:97:a0:79:98:4d:ef:
1d:23:53:2b:e5:af:36:d6:fb:f3:5f:9f:0b:12:75:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:80:42:90:30:47:08:D2:A6:D1:64:7F:9D:B3:AE:FE:59:5F:61
X509v3 Authority Key Identifier:
keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:df:7d:e5:80:1e:fe:46:4b:c8:98:02:00:a6:0e:15:59:e1:
d8:92:d8:f4:80:e6:7b:72:42:1e:6c:78:e0:e4:7c:35:11:bc:
d7:bb:52:b2:e1:4d:d4:9e:20:0e:64:f2:56:fb:0d:88:4a:27:
21:2a:8b:27:00:b8:d9:65:dc:fe:00:5f:56:61:4f:4c:48:55:
b7:f6:bc:3c:45:31:ea:37:b4:47:28:bf:c9:de:b0:9f:8a:70:
b9:91:d2:95:0d:ae:c2:fd:e0:70:f6:3e:c4:87:f7:d3:b3:4d:
74:fa:08:a1:1c:a6:29:d0:2e:82:23:82:0a:70:9d:f1:1b:d7:
52:30:0a:fd:65:25:17:52:2a:bc:9f:c7:6a:12:ee:2d:64:1d:
cd:f2:e3:b2:bd:a4:4c:2a:8b:ec:b8:d2:a1:03:28:66:50:87:
f2:45:44:69:05:08:c8:ac:bc:e4:09:32:c9:42:42:55:d7:ff:
21:2c:05:10:d9:04:88:6b:ab:e3:c7:e4:5a:79:7b:7f:9a:83:
d2:7f:30:3e:70:77:4e:82:1f:e6:0a:90:49:07:42:01:18:df:
d4:c4:a5:79:71:22:7c:e4:3a:44:4b:5e:32:ec:38:20:26:0d:
6e:63:b2:5b:65:43:9e:be:f8:b4:de:c0:de:65:be:fb:c0:e0:
96:29:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:11:01 2025 by rpki-client