Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: OXrLKUCI7fDwC2CPc1En8Sx1abVS/5J9wSytmX0C+jE=
Subject key identifier: D9:B2:CE:3A:CA:F9:F6:F7:44:D6:9C:30:20:2F:31:10:49:12:8D:D3
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0198D5836E1678298BCB28DE918BCB4BA0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0455
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: Zs3u/nCQbaGTsfgL+5/yRfEo7DIufGQOi6Szp9YqI7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6e:16:78:29:8b:cb:28:de:91:8b:cb:4b:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=d9b2ce3acaf9f6f744d69c30202f311049128dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:e7:b0:53:47:c5:f0:0f:e3:ec:33:c6:d5:
41:38:d8:1f:ba:bb:90:3e:ca:2b:e2:6a:c7:95:c5:
2e:65:8c:65:43:a2:48:46:c2:cd:90:d8:37:1e:2d:
84:49:8a:ae:28:37:0c:b1:36:f9:c2:3e:df:c9:4a:
24:c0:f5:3f:4d:32:de:62:79:a0:ad:cf:61:62:d4:
e8:74:00:06:2e:bd:c2:73:d4:76:2d:f6:6c:a7:e4:
58:8b:cf:5d:d2:4e:57:ca:72:84:c6:4a:de:3c:be:
27:b9:22:c2:c9:2d:b3:2d:08:93:58:43:9d:df:d7:
8b:96:42:d9:de:82:82:23:e3:be:1f:23:96:12:99:
ab:ff:39:1a:d7:b8:64:75:81:d5:29:45:95:fc:3e:
eb:7a:8b:60:d4:b0:27:5d:33:df:ce:8c:15:81:5a:
1f:4f:d4:97:23:57:3f:31:ab:b6:c7:87:9f:cd:18:
5e:29:f7:3d:f4:f5:e4:8b:1c:55:8e:92:5a:5d:87:
0c:dd:5e:92:52:78:52:52:4f:a3:ed:94:ac:de:c7:
8c:1b:cd:2c:b9:49:69:58:f2:ee:44:11:e9:78:e7:
4c:26:5e:c1:aa:06:46:af:18:9f:32:ef:5b:5d:ee:
15:a4:67:79:57:47:6e:ee:5d:f2:88:47:7f:a6:63:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:CE:3A:CA:F9:F6:F7:44:D6:9C:30:20:2F:31:10:49:12:8D:D3
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:6b:71:00:01:12:06:a1:25:7c:19:24:08:eb:db:1b:20:
bf:1d:06:a6:43:8d:0a:8e:1c:ff:70:aa:35:47:c4:79:19:57:
73:7e:e7:b9:fb:74:fb:cf:e8:7f:b6:88:22:cc:8b:57:a7:ca:
9d:ec:cb:d5:da:cf:27:fa:8a:ce:3e:da:a8:35:b4:2f:6c:a1:
8f:5b:1f:f8:4a:e8:09:b0:9f:88:f5:48:07:ea:e9:5e:b4:7a:
a6:ab:40:d9:dc:29:ae:90:13:49:33:33:65:b0:c0:00:ee:21:
e1:7a:d7:3a:60:8d:e3:9e:63:99:c0:69:0d:e2:f3:4d:9e:7b:
83:bd:93:3b:a2:3f:10:0c:20:38:29:39:1a:2e:ba:01:97:af:
c5:45:9e:8e:aa:19:5b:1c:57:29:bc:9a:48:52:49:6c:da:16:
c9:b2:2d:93:cf:32:13:2f:94:2b:6e:2f:60:98:b1:2b:2a:a3:
1f:b4:4f:43:96:fd:2e:e7:cc:a7:91:88:cc:60:66:60:b7:4e:
e7:9e:33:43:aa:6a:90:c6:23:3b:5f:57:01:b0:9c:1b:e9:c5:
39:42:f1:66:b8:95:92:9b:b8:82:43:ed:7f:82:67:ac:8e:78:
c5:9d:8d:70:b2:d2:fe:62:23:88:98:6f:b4:31:8b:92:84:d6:
e5:43:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:52 2025 by rpki-client