Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: JEnUj9xAATthG3Qjx0fOUT3Qj9tN7UgOhGu+cQJZqKU=
Subject key identifier: 67:A4:7E:00:57:0D:7B:03:AE:13:C6:6C:A7:AC:45:59:47:9B:4A:58
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 0197CBE00FCDEEE41FD0DA7069ED3C2A3722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 16:02:28 +0000
Manifest this update: Wed 02 Jul 2025 16:02:28 +0000
Manifest next update: Thu 03 Jul 2025 16:02:28 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: Q+l88wSyXxLmZavTpo/rBrzAJKDCIl/ub0iAU/gY8IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:0f:cd:ee:e4:1f:d0:da:70:69:ed:3c:2a:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Jul 2 16:02:28 2025 GMT
Not After : Jul 3 16:02:28 2025 GMT
Subject: CN=67a47e00570d7b03ae13c66ca7ac4559479b4a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:10:32:e0:13:19:ed:c1:ec:cd:8b:0e:c5:
25:02:14:91:ef:99:d9:88:29:a1:3d:66:a0:61:52:
b0:e3:fd:94:f0:37:3c:a5:d0:cb:48:3d:d7:8a:8a:
c1:ab:3c:b1:e6:9e:3a:64:5f:e5:73:ed:ac:c2:6d:
b7:64:57:26:ac:92:33:75:ea:79:13:b7:e4:28:fa:
25:37:e9:e3:d6:70:99:fa:0f:ef:82:d1:10:7e:ee:
e3:e8:1a:a0:e1:27:55:85:73:22:ce:c8:34:65:f6:
8a:73:ad:37:4d:d8:c3:8d:99:f0:4f:9f:b3:b3:32:
4a:74:e5:60:05:36:e8:e6:de:bf:cc:45:ec:91:91:
e8:ee:fe:d6:73:94:e3:2b:7a:45:e8:74:cf:af:c5:
e1:dc:3b:bf:00:9b:66:65:01:7b:67:d5:a7:ae:ed:
f3:16:3f:d8:67:b2:f6:33:51:e8:57:f5:24:ea:2f:
33:f1:16:c2:dd:87:2b:b8:a0:3a:e4:02:8c:f0:a1:
e3:78:86:1d:7c:ea:47:a9:23:86:27:83:d0:d5:f5:
c9:74:8a:a0:50:62:c8:5f:cb:eb:3e:f7:28:6c:27:
a9:2a:a0:d2:f1:b3:7f:70:ac:a4:d1:fb:6b:76:ee:
6d:46:e1:2d:18:9d:68:51:0f:89:5e:e0:ab:a5:9e:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:7E:00:57:0D:7B:03:AE:13:C6:6C:A7:AC:45:59:47:9B:4A:58
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:29:f3:3e:0a:32:ab:6f:ad:df:65:9c:e2:37:77:b0:db:5a:
b4:18:c7:2e:78:5a:ae:24:8a:dc:74:4c:ce:d4:35:ac:40:ab:
ed:cd:a4:a9:3e:2a:77:48:e6:82:70:84:0f:33:cc:70:05:64:
98:38:36:4f:e8:69:a3:2e:ad:24:f8:c0:6d:67:fc:dc:09:57:
52:54:0e:fa:6f:cc:cf:89:42:d4:66:b6:be:fe:69:4e:d7:22:
18:66:0a:b6:b0:af:8a:07:18:09:e8:21:56:6e:16:be:b2:16:
ba:43:ad:11:38:da:ec:25:2c:fe:5a:ef:a4:69:93:19:99:dc:
b3:df:f0:81:61:51:23:b0:03:80:35:c4:fb:9d:46:1b:15:74:
d2:9f:14:db:25:95:37:b1:9c:80:54:10:bd:a4:1d:d1:e9:fa:
76:5c:00:70:2c:c2:a2:af:c8:ae:9d:91:31:41:ed:fd:db:7f:
fa:2e:5d:14:18:0a:db:0c:c4:c2:dc:a8:aa:14:f5:d0:59:d8:
69:de:3f:5f:a7:1e:ba:2f:89:83:fc:14:38:ec:e8:17:56:7f:
54:87:d8:3e:84:cb:a8:01:45:d4:09:2b:ee:46:49:47:11:e5:
30:7d:c0:5f:94:44:3c:66:07:70:58:06:ec:bb:a3:fb:a9:c4:
0c:09:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:01:33 2025 by rpki-client