Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: 69QlMYG5iEQxonf4dwlNUOrB9DoffRfg8OkucsdDQ58=
Subject key identifier: 06:11:DC:2B:E4:7A:6E:6F:E9:FF:D4:15:E9:7C:35:70:FE:84:CE:74
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 0197B77C103D0DBB3C87B6DD9536B1944EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 0493
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: FOtl5Lzbn4RGmK5+2bOvFS4CU2otW5rCp625eJrQAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:10:3d:0d:bb:3c:87:b6:dd:95:36:b1:94:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=0611dc2be47a6e6fe9ffd415e97c3570fe84ce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:55:fd:ac:27:99:24:da:c6:97:3d:17:65:
6c:de:25:2e:d4:1b:4d:bf:56:62:d2:95:53:b8:22:
9c:e5:39:7d:70:3f:16:5b:52:29:8d:f7:1c:db:21:
16:d6:2f:c5:f4:6a:4d:ef:35:07:bc:da:75:5a:41:
7d:f6:0e:7f:89:03:59:a7:56:33:21:23:4b:3d:0f:
c0:04:e2:51:ca:d0:90:41:96:f1:88:ac:14:05:ae:
ba:ba:8f:10:95:78:bf:51:18:a4:ae:e9:e2:9e:20:
7a:b2:97:d9:37:73:7a:ed:0f:88:1d:7b:73:98:6c:
96:5e:18:90:be:a7:0e:d5:8b:a0:22:0b:b9:cc:f0:
ec:3f:25:66:1e:81:dd:5d:4b:9f:1a:f2:91:f9:c0:
3a:89:ea:02:90:0d:74:5d:84:1c:26:6d:d5:e0:7c:
1f:eb:17:16:f8:7b:ff:72:be:b5:e5:3a:80:29:79:
45:e1:92:3e:9e:59:11:6b:19:72:7d:b9:83:93:ca:
bd:93:ac:ad:67:1f:fd:9b:c5:fb:d6:cc:ed:a1:ad:
1a:81:51:f8:2b:e9:c7:20:42:18:72:d7:89:be:0d:
16:53:65:9a:02:af:03:51:e2:c7:ec:dc:f8:cf:fd:
5d:de:36:c5:46:3a:92:5c:5d:16:ec:9a:49:1d:b5:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:DC:2B:E4:7A:6E:6F:E9:FF:D4:15:E9:7C:35:70:FE:84:CE:74
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:ce:dd:43:6b:c2:a7:3c:b7:f1:8d:32:06:76:4b:09:0a:
58:54:8b:3c:a3:1d:23:92:79:a3:76:e8:1e:42:9e:bc:eb:61:
54:b6:53:fb:40:1a:c5:49:b1:db:4b:34:4e:07:8f:7a:50:2e:
95:8b:60:ac:4a:b7:27:47:dc:b1:f7:31:9a:36:f0:9d:31:d8:
68:2e:59:8e:d3:ac:46:c2:c7:fb:95:a6:a6:a8:3a:79:c2:39:
92:da:2c:99:4b:ac:25:71:66:58:b0:71:3a:4e:94:06:f5:1d:
cb:ab:d8:1d:54:5c:e6:be:49:be:ef:4b:1f:4a:08:c9:a4:8d:
c8:15:f2:7f:fd:e6:84:5f:b5:ad:a9:3b:5e:b9:fb:4b:d9:45:
ff:04:86:b6:6a:0d:c2:4a:f9:55:9c:c7:b4:11:cb:55:be:01:
29:c2:0a:a2:cc:21:87:14:ac:59:48:65:6e:eb:c3:05:6e:cd:
42:f4:ea:37:60:82:c0:21:43:d8:96:4e:81:33:14:b3:46:e0:
45:43:d8:d9:99:89:d6:a1:34:10:47:7f:ce:50:f8:4d:c7:a1:
2c:5f:a0:4e:63:0e:4c:36:bb:db:b1:8f:d2:5c:1d:a4:32:de:
58:eb:a5:55:d8:24:5f:6e:a4:67:37:c9:e1:96:54:94:ff:06:
be:e3:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:41 2025 by rpki-client