Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: IW8CsWPMmVV04UN2mSdylE/SJZ0cK3+Df5KDUnFLO60=
Subject key identifier: 90:6A:C6:72:37:C7:EC:D1:EF:91:EA:CC:AC:DE:19:85:E2:0D:E4:7E
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 0198D84F6BA8752F82047A8794BD9EA03E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 19:02:19 +0000
Manifest this update: Sat 23 Aug 2025 19:02:19 +0000
Manifest next update: Sun 24 Aug 2025 19:02:19 +0000
Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=)
3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=)
4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: RrmkzgGVEhnuBwI96Lkge1a8Sw7lpDA69I1HHBnqVIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:6b:a8:75:2f:82:04:7a:87:94:bd:9e:a0:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Aug 23 19:02:19 2025 GMT
Not After : Aug 24 19:02:19 2025 GMT
Subject: CN=906ac67237c7ecd1ef91eaccacde1985e20de47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:43:dc:9f:ee:d1:38:a8:95:27:66:20:76:
ca:7a:98:b1:94:f1:93:50:17:15:da:aa:0b:7c:ce:
18:0a:e6:23:c6:e6:0f:d7:e8:e4:8e:01:52:39:6e:
50:e5:ec:59:7a:f0:22:e6:01:7b:e1:b4:3b:6e:bd:
d1:1b:34:2b:9a:e2:48:e2:ae:c2:c4:48:b9:a4:b0:
43:74:8c:60:74:66:65:48:b4:83:ea:d5:44:6b:ce:
d7:46:c0:1c:3d:dd:c3:52:e4:94:4a:57:94:c4:51:
ca:3f:d7:27:dd:c1:dd:30:75:04:1d:02:b4:66:5c:
5e:1d:12:22:27:4b:d2:1a:d5:15:c8:6b:52:12:58:
73:84:f7:92:a0:90:1f:f4:5c:00:6e:fa:1c:e7:aa:
1c:f1:59:1d:19:ae:2a:c8:b8:12:31:d3:38:1f:33:
c7:74:6f:7c:ef:7a:aa:a5:ee:32:5e:31:6f:25:0e:
a7:cc:33:7b:82:cc:f0:c0:47:2b:bc:12:41:b9:68:
55:45:0c:99:29:c3:74:7b:ee:39:ad:43:ac:15:c5:
4f:10:68:f0:7e:ce:4f:39:45:7a:5b:56:f2:dd:e2:
a3:16:1e:8a:97:6f:d0:aa:7c:8e:e3:75:e9:7c:1f:
94:e0:fc:d6:70:cb:90:01:71:0f:bf:9f:1a:57:d5:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:C6:72:37:C7:EC:D1:EF:91:EA:CC:AC:DE:19:85:E2:0D:E4:7E
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:71:ce:37:6a:d6:91:4d:5d:cb:e2:55:67:ec:7f:b7:03:
a7:09:f7:b9:03:c6:ac:e5:88:89:2f:bd:ff:a7:f6:90:2d:99:
3c:b5:35:8f:66:18:c1:74:fd:41:4a:fc:23:df:a3:05:a5:f3:
ca:ab:05:9a:39:28:b2:f8:5e:23:2f:37:ca:a7:b8:40:6a:16:
c8:17:2c:52:1f:d0:5a:ea:ac:20:3e:3a:0b:31:1a:e9:84:ca:
99:ce:41:dc:3c:0c:ee:36:94:3a:2f:bb:f4:c2:8a:03:cf:ba:
8d:68:c8:f7:a2:09:47:5a:f8:4a:15:7b:cc:17:3f:98:f5:59:
f2:f2:d5:d5:31:b8:e9:bc:3e:6b:a4:82:45:e5:91:03:32:3d:
30:f5:1b:91:b2:09:4e:9e:34:92:63:36:8f:b1:24:71:73:b3:
23:db:2f:bf:a6:da:88:7e:c8:2e:cd:7f:00:74:21:41:e4:25:
fa:fa:1f:1d:5f:22:39:30:25:a5:8f:89:5f:67:75:7a:da:30:
e2:12:54:e6:33:c7:be:7c:ea:05:ef:b6:c0:1f:b1:95:51:ae:
3e:e9:36:72:1d:fe:2a:26:b0:9c:77:ac:4f:a6:c5:5c:ad:33:
b7:88:a9:7b:8f:24:4b:74:f9:4d:f6:21:9c:27:37:7d:75:76:
bb:0c:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:40 2025 by rpki-client