Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: V91PuZHPrCXy5QuPotnlfBfm5/dZtoxLs1U1WgglASw=
Subject key identifier: 07:B4:FD:F8:81:3C:D6:CD:DB:A9:79:9A:65:F8:E1:93:C0:D1:A5:FE
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0198D5BBD9BBD40EB739D2E37C2E72EB675B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0F0C
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: d1F7gbGR6vnAOvuyPEVY649sRUlV31OR/nikAlO3+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d9:bb:d4:0e:b7:39:d2:e3:7c:2e:72:eb:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=07b4fdf8813cd6cddba9799a65f8e193c0d1a5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:23:88:a8:6f:eb:a0:be:2a:19:fc:92:98:
3b:e2:26:5f:d1:5a:ca:47:94:4d:86:d3:24:91:2d:
ab:15:02:fd:ee:1d:f2:7d:ca:da:d3:00:e5:8b:f5:
fa:21:3b:f2:62:7d:5a:7e:29:e2:0c:d4:e3:07:3a:
e2:d0:95:1b:ed:e6:99:19:47:a6:d8:e1:12:4b:eb:
b8:bc:8f:59:09:b3:72:bd:dc:30:54:76:9c:ae:f2:
af:c9:6f:53:5a:a8:aa:c8:fc:5a:f7:8b:85:b4:74:
76:9f:e8:53:39:5a:07:dc:3e:d0:e0:2a:b9:b6:4a:
06:02:bf:d4:bf:63:27:13:03:eb:66:69:e8:04:d8:
85:1c:32:06:83:a4:72:b8:25:99:ef:c0:12:79:3e:
04:e2:d1:e2:a8:ef:65:b5:1a:02:a0:6f:db:d5:09:
eb:22:e0:14:f2:be:a8:9d:66:44:48:33:8a:3d:5c:
6f:46:41:03:c7:d8:10:c9:05:7b:21:91:ee:69:30:
9a:b6:86:c2:31:b0:61:4c:3f:dd:59:ef:14:97:7c:
b7:a8:10:85:02:f4:d5:01:5d:e4:bc:2a:07:72:86:
4e:f9:f2:8c:cf:bb:11:ac:53:fb:bd:d7:79:c2:2f:
08:c3:0d:ae:3c:c2:1c:b3:fc:47:db:f4:68:eb:e6:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:FD:F8:81:3C:D6:CD:DB:A9:79:9A:65:F8:E1:93:C0:D1:A5:FE
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:4b:43:ab:85:e0:a3:2f:72:dc:8c:ff:45:e9:3c:49:4b:
b4:25:ab:e5:b0:8b:79:d8:90:8e:d4:96:bc:e2:7c:c1:fe:66:
ba:2f:bb:2e:7d:71:99:48:a6:f2:8a:bb:59:21:dd:ef:15:3e:
73:39:7c:2e:ad:7b:87:94:c1:59:21:5b:f3:ba:9e:97:8b:1c:
ad:5e:06:15:d0:1a:32:24:47:c7:ad:e0:db:9a:d9:a7:8e:66:
62:0b:47:90:57:cd:6c:84:26:bf:a7:cb:83:ff:ed:76:dd:40:
ad:b3:d1:2e:95:9f:34:68:9c:18:7f:17:b4:8a:d7:1b:58:86:
df:9e:d8:4b:aa:2a:e2:7c:8b:8c:c4:52:dd:99:45:cc:4e:94:
23:f5:2a:6e:8f:cd:35:8d:d1:5c:a1:d5:0c:fe:66:1b:85:46:
b4:02:59:84:d6:75:d7:80:59:09:05:8f:3b:3f:ac:6c:03:d7:
c5:3c:04:50:68:ca:86:77:6e:dd:a1:9b:8f:f0:a8:67:7e:60:
b5:3b:bb:69:96:d6:2e:05:c2:a2:4c:f3:e9:d5:aa:77:93:c5:
c9:e6:8e:0c:9e:66:dd:49:be:7b:50:e4:74:83:56:84:96:36:
a7:53:9e:c0:50:6c:c3:a8:e7:c2:b4:74:c2:a1:ed:00:98:17:
3e:72:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:18 2025 by rpki-client