Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: uZlCog7ibGUYPeIyfex6OVrOCgSRGHtJXiAxsV02j9w=
Subject key identifier: 62:2C:91:98:44:7C:36:90:7B:5E:24:23:1D:C6:E5:EC:69:E3:61:64
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0198D54E05E5E52F65A4E0445F6EE304D4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0468
Signing time: Sat 23 Aug 2025 05:01:57 +0000
Manifest this update: Sat 23 Aug 2025 05:01:57 +0000
Manifest next update: Sun 24 Aug 2025 05:01:57 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: dxJp4jGPGmxEz4zUrl/fVKUgh2saUTQSXDt7z0iI0BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:05:e5:e5:2f:65:a4:e0:44:5f:6e:e3:04:d4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Aug 23 05:01:57 2025 GMT
Not After : Aug 24 05:01:57 2025 GMT
Subject: CN=622c9198447c36907b5e24231dc6e5ec69e36164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:95:c2:b3:55:29:39:85:d4:1f:36:43:09:
59:23:ec:b9:a2:c2:ee:8a:e6:ba:d8:65:04:a4:8b:
fe:2a:30:b7:fb:cc:4d:c6:c2:a0:5b:8c:b4:ce:0e:
49:64:06:bf:55:b7:02:fa:47:00:06:53:f2:f9:57:
da:be:b5:b2:75:9b:f1:13:68:99:75:f6:c2:57:1a:
cf:ea:0c:99:d3:72:d7:e8:c4:ef:d9:50:db:1c:02:
5e:b2:60:ef:db:ca:78:41:da:86:24:9e:89:3d:fe:
ee:08:96:d6:d6:f5:14:ef:37:2c:72:9c:19:cf:d7:
5c:8f:5a:8b:86:3e:ee:a6:46:4f:ef:a1:0e:d0:52:
81:4c:b3:d5:4c:98:b5:e1:94:ed:04:bb:0a:35:4a:
d6:cc:6b:d7:36:0f:ad:2f:38:19:af:53:3a:e4:da:
c4:71:97:28:d5:3f:73:a9:9c:80:c2:12:8c:db:e0:
ec:70:27:ab:f7:b4:46:f5:19:2e:20:b8:83:08:6d:
67:34:be:34:a8:8f:b2:b4:14:bd:9f:71:04:8a:1d:
a6:cb:23:6f:0e:65:f3:3e:c7:47:92:de:cf:a5:a8:
d3:b8:46:83:67:10:30:6a:3b:8c:60:f6:39:8a:cc:
37:ad:d5:38:60:4d:df:c5:96:64:43:86:43:eb:20:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:91:98:44:7C:36:90:7B:5E:24:23:1D:C6:E5:EC:69:E3:61:64
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1a:e9:f7:af:de:a3:4f:ed:e1:9a:dd:e1:30:59:e6:50:a7:
e3:22:1b:75:b1:88:c7:7f:ee:0e:41:05:69:97:4d:40:c4:14:
9b:e7:a2:e4:0d:54:26:3e:c4:c3:e9:d6:b8:d2:7b:e4:0d:2b:
b6:91:78:15:8f:aa:f0:59:3c:97:ec:b7:99:db:b3:9e:5d:db:
1e:79:d8:8c:f3:90:63:2e:9f:ee:2a:b8:07:75:a0:dd:e5:00:
b4:f9:ce:5d:27:9d:35:e1:3b:53:31:e4:0f:cd:af:8e:7e:d3:
56:26:a9:b5:75:03:ba:1b:d2:1b:32:a3:7e:ac:03:70:67:c2:
e7:ba:3e:f1:83:20:1b:38:a1:ec:37:79:e7:0d:4b:6a:b4:fc:
cf:b3:be:5f:0f:84:27:f6:d6:8b:94:f8:f2:6a:d9:42:5a:bf:
08:e4:19:b5:9c:3f:3d:24:01:69:97:4c:58:00:c2:34:ca:17:
33:7f:00:da:28:e7:28:23:b7:ab:a4:6a:fb:4e:96:3b:7d:7e:
1f:7e:eb:2b:37:5c:d5:05:48:12:28:cf:72:af:67:05:f9:3f:
22:40:a5:bd:ec:bf:41:86:04:0a:61:dc:83:ef:2c:e3:38:55:
51:c9:22:e9:42:4b:3d:4c:5b:a6:73:6c:90:7a:17:3a:a6:52:
25:8d:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:48 2025 by rpki-client