Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: oh8GphE0i7ymYtTQuUm3ACO0yZnuuiKEkQwn+zKoFl8=
Subject key identifier: 51:8F:17:D6:9F:48:54:54:CB:26:1F:65:B2:05:FF:A5:3D:A4:AF:5A
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 0198D404E15E9B9C3BC091B8F529D65A109D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1647
Signing time: Fri 22 Aug 2025 23:02:26 +0000
Manifest this update: Fri 22 Aug 2025 23:02:26 +0000
Manifest next update: Sat 23 Aug 2025 23:02:26 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: 8QjVSGvmzIfrY1OrwgxkdIr3wE6vKtCQnxUAwpVbUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e1:5e:9b:9c:3b:c0:91:b8:f5:29:d6:5a:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Aug 22 23:02:26 2025 GMT
Not After : Aug 23 23:02:26 2025 GMT
Subject: CN=518f17d69f485454cb261f65b205ffa53da4af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:dd:cd:27:bb:e9:4f:67:2f:d4:81:14:c1:
7c:9a:a5:c6:ed:2b:fd:19:43:91:d6:85:c3:de:0b:
54:45:f0:db:70:15:0d:7c:da:c8:64:05:84:89:8a:
96:d0:02:17:74:2b:5f:7a:fb:8e:62:55:fd:38:f4:
55:97:77:96:8f:03:b6:45:15:4d:60:cb:1c:f4:3f:
bc:07:ef:f8:e4:81:12:2c:06:86:39:b8:6e:5a:2e:
17:e6:68:d1:9f:d0:48:33:8a:2f:c4:08:32:c8:56:
86:b3:06:ae:62:bf:b5:19:2d:db:19:ee:d2:1b:9b:
64:7b:7d:89:d4:10:c2:97:2d:cd:ce:70:68:ea:aa:
fb:3e:7d:9a:35:95:36:de:3b:03:79:02:d5:47:49:
e4:68:da:27:9c:b6:a5:70:f4:39:88:ad:13:bd:e9:
66:b3:c2:c3:38:41:98:00:be:59:75:53:29:01:37:
c1:3b:11:d8:7c:ac:76:57:a1:a2:76:4e:73:bc:c9:
68:f7:01:67:ed:7b:66:00:18:e1:b6:a8:fb:2b:63:
52:8f:11:42:3b:84:1d:27:7b:3a:2f:a9:55:39:69:
d5:03:a3:d7:d6:ee:97:fc:e7:38:2e:09:24:20:2f:
8e:3d:02:38:32:b0:3f:09:08:e2:7c:d3:80:4d:32:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:17:D6:9F:48:54:54:CB:26:1F:65:B2:05:FF:A5:3D:A4:AF:5A
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:4a:ca:95:86:ae:0d:15:d6:96:d7:dc:f0:e7:ad:09:99:88:
36:52:fe:63:22:63:4b:ae:31:e2:45:d8:c9:ed:29:73:11:2d:
31:79:f9:4d:c2:cc:43:61:a1:00:e7:4d:30:08:11:25:16:11:
d9:bd:9f:48:98:4c:45:95:39:21:84:22:ed:17:36:0d:66:5c:
fb:cc:d9:b4:a8:1c:2b:52:3b:ae:e3:58:6e:5a:31:e2:f0:fc:
06:17:41:ac:75:1d:e6:56:e5:e9:a3:2a:ad:ad:b5:09:7e:9e:
16:94:c5:3b:e7:bd:fd:20:5b:12:af:8f:01:2b:d6:c8:51:f0:
86:14:12:4b:87:ad:a6:21:28:b1:14:57:57:93:b1:d6:78:be:
c4:bd:f3:56:c0:97:94:f5:dc:69:e8:dc:b9:73:55:89:be:ae:
f7:9a:3d:7e:a4:1c:61:fc:d3:ed:2c:42:62:b4:8c:70:47:72:
da:29:e6:ce:f8:fa:a5:d8:78:61:62:d5:7f:0b:b4:d0:45:97:
e3:01:1a:dd:9c:43:1f:c8:43:d7:bb:ae:3f:84:87:3e:e9:4c:
75:8c:5f:fe:9a:4a:74:d6:5a:20:3f:03:54:00:64:f4:7c:39:
3f:f6:a2:7d:80:0a:02:71:76:19:a1:d8:fc:50:28:bd:6f:19:
eb:60:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:41 2025 by rpki-client