Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: M3TY6zdK612Uo2ACxK3RfjWTEInCinTfPfuWY2WMZrM=
Subject key identifier: B0:72:D4:DB:D3:9F:F5:75:9A:41:3D:B0:89:84:25:C6:51:51:5A:EA
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 01987DF86C928FFB737B3478C1545B57DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 06:01:29 +0000
Manifest this update: Wed 06 Aug 2025 06:01:29 +0000
Manifest next update: Thu 07 Aug 2025 06:01:29 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: ADU2ywDdJX+p2wb9WfkjIGiXnG8So3ilOLvu3GArLeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:6c:92:8f:fb:73:7b:34:78:c1:54:5b:57:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Aug 6 06:01:29 2025 GMT
Not After : Aug 7 06:01:29 2025 GMT
Subject: CN=b072d4dbd39ff5759a413db0898425c651515aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:c6:3b:d5:41:b0:c7:4d:e8:c6:00:bf:6b:
dc:9b:3e:56:35:da:62:21:c6:c4:91:6c:ae:d4:85:
a2:43:d2:46:da:69:4f:d1:e9:2b:dc:c8:8c:7d:f9:
42:74:e9:11:4b:05:60:16:9e:fd:55:f6:7a:5b:2c:
61:82:ba:88:a2:fe:42:95:d6:d8:24:d3:c1:6c:07:
18:87:c2:98:da:43:d1:3f:8a:8f:83:a9:a2:59:26:
f6:09:02:00:c4:fc:83:01:94:9f:a6:df:de:fa:65:
d9:2f:5b:2b:aa:ea:ac:a6:ca:19:2d:5a:65:3d:e0:
a8:c9:c0:d3:28:43:55:35:ff:f5:78:bc:0d:da:02:
ba:32:5e:18:6a:1a:68:fd:73:7d:9f:ae:90:09:fc:
62:b3:db:ca:08:49:fb:bd:01:0d:f2:3b:11:49:ec:
a6:8d:c3:90:46:72:f8:d1:bd:9a:f5:48:77:e9:3d:
f1:b9:85:60:08:a3:5c:4f:6e:54:76:c9:d1:4d:19:
cb:52:6d:c6:46:de:70:72:fd:8e:c3:f2:9e:6a:3a:
2d:f7:19:61:05:8c:8c:af:72:d4:59:26:12:27:58:
3a:cb:9c:75:43:a8:df:d4:90:56:b1:de:ed:de:6c:
85:be:5f:e5:94:7e:59:4c:7c:e3:b4:32:20:f8:3a:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:D4:DB:D3:9F:F5:75:9A:41:3D:B0:89:84:25:C6:51:51:5A:EA
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:83:bb:8c:6d:a6:f0:dd:66:5a:db:84:84:f8:9f:51:02:
c2:5a:1e:11:66:e4:d5:6e:5d:04:00:b5:27:af:e6:c9:b1:51:
54:3e:8d:de:0c:c3:b6:7f:6d:4e:3a:85:4b:73:75:50:c3:25:
65:f4:61:bf:c4:74:41:b8:2a:57:ca:64:51:bd:81:be:ab:f4:
60:47:b3:08:8b:82:da:06:91:1a:f9:8c:81:ac:78:ba:72:48:
ab:88:47:2a:e8:16:35:a3:bf:d4:b9:93:cd:17:a3:2a:f6:07:
9a:ea:3a:9a:78:fa:00:41:b4:33:ca:69:3d:30:de:c4:ab:df:
1a:32:fb:22:52:42:85:34:06:d6:d9:b8:45:b3:6b:a5:a4:1f:
b1:57:4c:6e:2c:34:bc:05:08:8d:26:f1:2c:fb:45:2d:0d:38:
c0:c4:bf:ba:ea:81:db:04:8f:69:86:aa:93:b2:52:2e:d8:4a:
b4:d1:75:2a:45:71:7b:59:1d:ac:49:7c:3c:f4:7a:74:dc:54:
a1:68:fc:e7:e0:69:4b:a0:ee:ab:82:e1:82:ca:6b:80:40:4e:
cc:df:3b:d6:c5:18:1b:3e:24:02:e3:35:4b:68:d0:3b:1e:6a:
4a:b5:96:55:31:da:a8:cb:c6:3c:65:0b:1f:11:db:a0:07:72:
8c:7c:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:49 2025 by rpki-client