Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: 9qbTu/8SXkuncy7+SC06C0ZZabbrNa2CjhZGRdwu+/4=
Subject key identifier: 7A:C0:09:91:26:F3:3F:CB:14:5F:4A:F2:8B:C9:87:7B:82:73:9C:3C
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0197B7B32834A83B9DCD99174D5F22266770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 03C1
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: H5rvJ+PwQ7Tw+SFhWDEdASxDO4YDF2bLWSibzyJGsTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:28:34:a8:3b:9d:cd:99:17:4d:5f:22:26:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=7ac0099126f33fcb145f4af28bc9877b82739c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:a7:b8:92:03:80:8a:94:19:4f:7c:59:42:
75:7e:7a:61:1f:89:0e:c9:be:d2:f8:39:f3:55:a0:
13:fc:2b:4a:66:ae:69:19:8f:37:97:21:b7:3c:3b:
3d:99:d4:c7:6f:69:12:1a:a6:99:6c:fa:6b:8b:0d:
52:31:fc:25:d9:c6:d8:c1:e0:47:7b:76:99:e8:65:
63:b7:12:0c:02:79:43:65:a2:46:ab:88:26:1b:16:
2b:ef:77:53:94:64:45:55:b2:58:05:02:e8:6b:99:
66:ad:8e:b3:9a:d4:6c:25:d0:f3:8b:1c:6a:c9:10:
02:23:89:70:e4:5b:e3:f3:f8:67:89:58:d4:98:2f:
54:b1:bf:b9:eb:61:58:48:89:8e:ad:3f:a8:4d:95:
3e:75:1b:46:ac:21:27:84:af:12:3d:53:92:f5:54:
89:2c:e4:e8:89:4b:97:e4:0e:0b:ee:27:5d:4a:23:
18:e3:3f:8f:69:d3:ea:50:f0:93:31:e5:bc:cf:0d:
15:1c:fa:67:a5:ad:9d:2d:2e:bf:49:4c:90:3d:75:
da:58:02:26:58:ff:b1:3d:5e:4c:ff:8c:07:ef:82:
67:5d:1a:6a:00:67:a5:8a:28:d7:6b:e3:70:53:26:
c6:73:bd:78:a4:89:ed:24:b4:21:93:c0:07:c7:eb:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C0:09:91:26:F3:3F:CB:14:5F:4A:F2:8B:C9:87:7B:82:73:9C:3C
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:83:6f:3a:88:60:6f:be:3a:5b:9f:93:52:76:d5:7a:fa:ef:
fa:96:73:5b:93:38:a5:fe:93:96:85:52:d1:32:ba:f3:a0:79:
bf:d2:e8:b1:a2:90:b9:d6:e6:fb:fe:19:91:6c:2f:53:a4:53:
ad:09:9c:f4:62:50:84:cf:7b:fc:5f:0f:3b:ee:4d:d7:0d:18:
46:7c:f3:70:3b:c8:26:37:0a:26:84:bb:a7:57:ec:8b:1e:45:
ff:86:66:19:7d:0d:83:ee:31:31:95:cd:1f:32:c3:6e:95:53:
17:61:0b:c5:77:f7:57:36:4b:ba:90:b0:02:ec:18:38:ef:64:
12:40:6e:bd:ce:de:ea:88:ad:56:ea:dd:ff:75:47:b7:11:be:
73:77:9f:79:9c:e5:31:51:1a:56:95:73:15:da:92:4e:7b:88:
6d:9f:3f:6d:f3:67:92:75:72:10:b2:e0:31:bb:98:ac:ce:90:
9e:d5:0f:c8:5d:10:b0:63:61:fc:82:d3:84:e5:64:e1:f1:dd:
ba:1c:8d:ab:02:3f:f2:36:2d:4d:cf:b9:58:79:e6:a1:4d:4e:
b6:e0:2c:fd:6b:42:d7:62:86:3e:1f:37:e5:99:55:48:87:8d:
a7:c0:39:66:fd:48:1f:39:f7:8c:2d:e4:1c:35:17:94:64:45:
19:2a:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:20 2025 by rpki-client