Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: /CWk40NET9DFRcl4vLtcqHx9uXs6L366GNgl5KMAHM8=
Subject key identifier: 61:6F:96:7D:4D:1C:9F:A7:A8:1D:B8:1A:92:CA:B7:9C:E1:46:19:FF
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0198D54E67E9277048832D7CCD221603B29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0527
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: Fe/5iQJHGIGpe4rMNe6rEmsCD1XBkcqSbpu9qCgEl9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:67:e9:27:70:48:83:2d:7c:cd:22:16:03:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=616f967d4d1c9fa7a81db81a92cab79ce14619ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:11:e6:83:5d:75:5d:e9:04:a9:77:5d:79:
21:b9:9c:13:fc:3b:2b:b4:8b:46:cb:0d:2b:21:ba:
fb:cd:7d:e2:07:97:4f:65:b1:7f:83:25:4b:d4:fd:
57:d7:73:90:c4:47:20:41:ef:4c:79:99:e9:47:41:
30:43:ba:db:c2:37:5f:ed:c9:ef:65:1b:7f:41:ff:
19:6c:00:c1:47:f0:18:80:84:3c:a2:24:2d:dc:01:
f6:55:cf:c7:91:56:84:8c:c9:b1:5a:8c:d1:52:64:
2f:83:13:c7:c6:21:81:8d:e7:90:61:32:c5:02:0a:
2e:f2:5d:b5:f3:f7:1d:4a:0c:1e:7d:0c:89:ac:44:
d8:a9:44:08:51:6a:12:1a:a5:b5:b3:a9:2c:5b:69:
36:4f:10:d9:2c:53:82:bf:b2:b7:b1:83:c2:a9:ff:
19:88:41:9d:6a:3e:0a:61:c2:a6:82:af:3a:9e:ad:
48:bb:a7:ed:ca:66:87:dd:30:48:57:90:c5:30:9e:
14:05:0f:5a:6e:29:f5:6a:1f:f7:48:e2:42:08:ee:
51:86:9d:48:46:34:5d:5c:78:70:f8:f1:31:54:b9:
0b:6d:d0:6c:b2:94:a4:40:7f:13:16:ba:07:25:39:
24:11:4a:f9:09:fb:a3:8d:f9:02:49:16:3f:e6:60:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:96:7D:4D:1C:9F:A7:A8:1D:B8:1A:92:CA:B7:9C:E1:46:19:FF
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ac:41:be:1a:b7:4f:2b:e6:bd:ef:54:7c:96:df:b9:60:9a:
fb:a2:95:bb:91:39:d1:70:28:09:a1:3e:b9:60:7c:1e:df:c4:
7f:9b:74:07:96:59:27:ba:b4:f1:ed:db:3d:63:b7:07:ea:66:
6f:04:ac:b2:93:4f:ff:28:f5:a6:66:05:ab:67:e2:92:94:87:
f8:5c:08:ba:0b:ce:01:1a:11:c3:a4:19:0d:bd:91:e8:57:82:
f8:0a:c7:4f:a5:c4:ba:5c:fc:c4:ef:20:51:a8:0a:0b:10:42:
93:9c:0c:25:54:c1:49:c9:dd:7c:35:4f:6f:63:92:fb:c1:28:
43:9e:a8:fe:8d:59:46:ef:37:8c:6e:2a:f4:29:25:ce:8a:28:
fb:5c:25:0b:fe:2a:b2:98:0d:67:db:94:85:a9:de:f5:9a:b4:
c1:af:fd:18:a6:44:6b:3c:a1:be:b4:c5:54:90:b1:05:aa:b9:
36:ee:4d:fc:be:0d:63:25:6e:15:60:15:b1:08:fa:99:8f:ab:
d9:07:57:32:5f:10:e7:6f:5c:b7:4e:cc:6d:48:32:cd:5d:e3:
59:e5:50:5b:ff:ef:51:a3:e1:90:74:bf:92:17:99:32:a1:d3:
b4:10:a3:16:01:19:8b:5b:2d:9d:70:38:c9:80:20:f7:c2:b9:
eb:9e:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:02 2025 by rpki-client