
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: IvYzh5aV0tsQjMKo7stqfR6yHZQlqn3uid0cj6aKBBo=
Subject key identifier: 29:96:CE:77:C3:20:2E:00:3C:3D:52:59:B8:79:58:25:4E:2B:46:9A
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 01987A8953A0FAAB014485A20E0A6060779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0439
Signing time: Tue 05 Aug 2025 14:01:16 +0000
Manifest this update: Tue 05 Aug 2025 14:01:16 +0000
Manifest next update: Wed 06 Aug 2025 14:01:16 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: XxDF+8GTk/vh6ztQa/ugWAs09uN3KT888kQf6IgcXz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:53:a0:fa:ab:01:44:85:a2:0e:0a:60:60:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Aug 5 14:01:16 2025 GMT
Not After : Aug 6 14:01:16 2025 GMT
Subject: CN=2996ce77c3202e003c3d5259b87958254e2b469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:88:b4:0a:6d:39:95:c3:63:a3:e1:78:d8:
31:46:ee:fb:b4:cd:af:1e:c8:03:0e:fd:c3:49:05:
01:2a:1d:48:fc:e8:54:8b:a9:f6:97:3d:58:84:e1:
3b:4a:24:11:76:26:7f:35:bb:4a:86:45:0c:00:6b:
c0:26:9a:77:a0:60:76:c3:7b:70:1b:dc:c1:20:ce:
1e:15:6b:b3:23:7a:b4:59:39:4a:22:f0:68:a9:b4:
7d:27:17:f5:cc:76:87:95:97:a8:36:8e:6d:d0:7a:
2a:43:f8:68:90:6b:a1:a5:09:fb:50:3f:7a:b9:34:
71:e7:16:ec:6d:c3:79:00:40:ad:15:ef:81:03:1a:
f9:31:2f:1e:e2:81:7e:3b:ae:4a:19:cd:f9:d4:5a:
31:8c:ae:78:d2:7c:13:c3:65:44:e6:45:2d:0b:35:
4a:5b:5d:17:15:ab:15:1c:2a:ec:19:a6:dc:01:e8:
19:40:1f:19:a1:4f:d0:16:17:e9:16:53:63:af:eb:
9e:5d:dd:5c:e4:98:1c:2b:bb:d6:b3:93:f1:14:b5:
60:43:97:16:ad:4b:d0:f7:5f:77:b1:65:98:be:bd:
32:06:1d:13:60:4c:77:c8:08:5e:4c:84:d3:e9:8e:
b7:70:b0:fb:70:83:18:55:a6:0d:b1:79:57:d0:d4:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:CE:77:C3:20:2E:00:3C:3D:52:59:B8:79:58:25:4E:2B:46:9A
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:a4:a0:31:82:ab:48:b6:8d:3f:94:a5:d4:2f:df:dd:05:
2b:41:d7:f7:15:ac:4b:60:63:c9:d9:11:93:2e:18:01:e1:1f:
81:53:0e:c0:aa:e7:d5:b4:79:f7:43:0a:5b:29:cd:10:81:00:
03:18:06:8a:81:7c:c9:7c:80:7d:a7:49:62:88:b6:04:db:48:
08:54:32:b8:aa:08:50:d7:f4:7a:fa:b2:63:72:01:6f:c6:f0:
87:a3:a7:3a:e0:84:dd:61:3d:75:78:a6:d5:bb:56:9a:82:64:
1b:4d:ac:86:ce:ec:9a:d8:b1:00:e0:54:61:1f:be:63:df:32:
ab:df:5b:f9:95:76:78:42:a2:9b:7a:6a:c8:43:0e:c4:5b:26:
bc:1b:d7:b8:f8:42:33:a9:ae:6d:18:15:36:52:68:6b:f7:e5:
96:12:f8:20:a2:15:01:9e:8d:45:36:9c:65:c6:fb:fb:5c:82:
f0:45:86:98:3e:5f:e1:1f:67:82:70:be:55:20:5f:5d:01:c1:
54:49:45:ac:08:c0:b1:d9:eb:28:ab:1d:bf:29:f0:68:dd:6c:
16:ad:08:7b:8f:88:4b:f8:7f:9f:f0:b0:f8:d6:e0:4f:b3:05:
ab:1e:86:66:92:7f:c4:6b:2b:17:0c:8a:c4:75:6f:15:66:6b:
bc:56:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:49 2025 by rpki-client