Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: +WQEK4O3tH6hEf7Z9D4q0zs9SK6BFUuafo3APxDQwsU=
Subject key identifier: 9E:A7:F4:6A:0B:68:16:22:BD:AD:C8:48:D2:74:FA:59:C9:CF:8B:26
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 0198D73B9FCED97475E988751ED1FEAC2001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0A6D
Signing time: Sat 23 Aug 2025 14:01:05 +0000
Manifest this update: Sat 23 Aug 2025 14:01:05 +0000
Manifest next update: Sun 24 Aug 2025 14:01:05 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: Y5PXZz9voUZPA1ncAnH5+MMbKLtWjFl/5bSj8zLNxbU=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:9f:ce:d9:74:75:e9:88:75:1e:d1:fe:ac:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Aug 23 14:01:05 2025 GMT
Not After : Aug 24 14:01:05 2025 GMT
Subject: CN=9ea7f46a0b681622bdadc848d274fa59c9cf8b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:da:a6:d6:cc:02:b0:71:1c:a9:fb:ea:d3:
d7:95:c3:8f:47:4f:fd:e9:e5:f9:c1:87:7a:38:b5:
32:c9:49:79:85:94:4e:79:a0:64:e2:8f:20:52:c3:
ca:45:fe:d4:e6:f0:13:70:4f:87:ae:39:90:6e:34:
01:f2:49:93:28:54:8a:a8:13:be:ed:db:6d:ec:db:
ae:45:99:f9:a1:83:08:86:17:4d:d0:fe:ef:66:77:
72:97:94:62:de:6b:dd:8b:69:35:1f:a7:d7:b7:e2:
e8:fc:0b:1b:db:90:31:38:47:4f:c3:3c:35:8c:5c:
45:8c:f9:04:2d:dc:93:89:08:d6:b6:d4:7f:4c:e8:
48:94:a9:7a:8b:4b:ca:50:ce:68:50:00:47:21:68:
84:25:35:1e:98:2c:65:af:d7:bf:09:88:af:4e:f5:
99:51:f1:f6:20:37:85:74:85:f5:ca:91:d6:4b:1e:
20:35:a4:43:8d:2f:18:d5:02:22:36:cc:9a:fd:9d:
07:e6:1e:ba:5b:40:2f:d2:15:04:5e:a7:7c:38:59:
76:69:f0:a5:74:35:41:9d:44:e3:37:3c:39:01:ff:
32:ec:ea:a7:1a:ca:03:4d:00:75:f4:9c:fe:cb:f3:
4a:08:88:c4:c8:53:96:61:c4:fd:57:de:de:37:ee:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:F4:6A:0B:68:16:22:BD:AD:C8:48:D2:74:FA:59:C9:CF:8B:26
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:f7:3e:b4:91:8e:e1:c7:a7:48:a8:d3:69:5c:22:ee:ee:
a9:9d:cb:b8:86:90:4f:5d:14:b9:68:ea:89:b9:f7:b6:da:69:
29:27:94:e9:14:cc:89:bd:e9:3b:b1:2f:e4:2c:81:ad:c1:0b:
8b:aa:34:1d:c6:1a:5f:6a:13:76:3c:7f:31:20:df:ca:89:21:
7a:60:72:54:fd:45:8e:20:f9:40:b7:a0:c9:4b:c0:2f:78:8c:
97:c0:54:b4:ea:65:69:16:36:a4:69:72:74:15:5e:fc:ad:98:
7a:1f:7c:98:23:85:0c:9d:08:f2:ea:91:8a:b4:d7:a6:d2:76:
d8:8e:88:0e:dd:6b:d7:ac:83:61:8e:3f:ad:be:59:75:eb:28:
db:7c:ca:1a:50:77:fb:a5:8a:fd:5f:4a:aa:0c:e6:92:2a:88:
5b:84:57:1c:23:cf:b7:15:b2:bd:98:92:77:1a:d5:87:2b:2e:
59:b0:9a:7a:cc:9b:8a:58:79:6e:e1:75:a4:c0:89:03:26:15:
59:fe:2b:03:a2:70:47:2f:46:d3:fe:f0:6c:c0:14:09:88:a0:
61:23:51:be:19:cf:a4:2e:df:b0:ad:77:d8:51:3c:b4:5d:99:
12:0f:d1:7f:04:4e:1f:63:cf:b1:02:7e:9e:11:be:4f:a2:ab:
66:81:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:52 2025 by rpki-client