
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: U+Bc5iZvM7r/ADLblQMC3V6txW6l/MfmJ5MBopkMk5A=
Subject key identifier: 6E:50:BD:DC:91:48:1C:C5:8F:E4:3E:FB:73:A3:E6:4E:09:31:6C:46
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019884D58E416A6D962495E6821118E0F95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 14:00:44 +0000
Manifest this update: Thu 07 Aug 2025 14:00:44 +0000
Manifest next update: Fri 08 Aug 2025 14:00:44 +0000
Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: raEUeJzrBk3KPg3Q0+/48fJ/y8MpuODnoqGdUCPrz40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:8e:41:6a:6d:96:24:95:e6:82:11:18:e0:f9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Aug 7 14:00:44 2025 GMT
Not After : Aug 8 14:00:44 2025 GMT
Subject: CN=6e50bddc91481cc58fe43efb73a3e64e09316c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:f9:a1:5d:dc:1a:07:ea:53:88:f8:25:24:
86:13:af:c0:a7:61:f7:fc:cc:84:ff:d3:32:7a:d2:
78:9f:47:5c:89:58:1e:59:63:22:b1:b5:8a:ea:c7:
c8:41:15:72:a3:2f:01:80:65:a2:d6:68:96:a8:4c:
f8:f4:b2:ae:c3:bf:1d:c5:1a:4d:64:d1:1f:26:46:
23:ca:01:f4:f0:ea:78:d1:8a:38:18:11:26:3d:cd:
7b:de:9c:bc:48:6d:7d:a0:ab:8c:a1:94:96:40:b6:
bb:f8:75:98:fe:82:b4:df:10:dc:66:fe:dc:6b:6c:
e3:db:8a:4a:ea:2b:2f:f2:ce:4a:3e:bd:88:a0:6d:
61:ea:c4:5b:8e:16:14:34:29:de:50:57:32:a7:66:
f1:4b:22:37:7a:93:ed:e7:4f:27:25:22:2a:65:02:
d3:9e:6f:65:04:35:3b:c2:46:4d:84:56:96:75:b0:
35:60:8d:e2:bb:98:90:26:e2:b4:14:ba:8d:3a:b7:
52:25:f5:7d:09:72:ca:06:6d:7f:d8:93:2f:57:f1:
7e:a6:13:87:2a:f7:36:c2:24:07:dc:1f:68:3f:6c:
91:9d:dd:07:46:b0:b2:d3:f1:37:1f:0b:50:65:d3:
8b:49:ea:a3:26:c2:85:16:69:ff:98:db:3b:a0:60:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:BD:DC:91:48:1C:C5:8F:E4:3E:FB:73:A3:E6:4E:09:31:6C:46
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:11:e9:d5:61:9c:09:51:db:b7:65:dd:fb:b6:0d:b0:ac:
5d:87:51:e7:11:c4:6a:ca:da:d4:cd:cb:04:77:cf:f9:31:46:
0c:80:24:4d:8d:a7:51:ff:b7:f6:7d:55:8e:9d:77:37:cf:a8:
49:27:d1:85:d2:25:3a:53:14:f8:90:7a:87:c0:11:08:ed:5c:
7a:dd:6d:e5:a1:12:fe:84:e9:19:3d:c4:b6:e1:1a:25:91:6b:
bc:37:af:62:07:c9:cc:1c:c8:19:05:aa:ec:42:ab:4e:18:fb:
c4:e5:14:b0:95:44:16:52:30:a1:7a:40:fe:a7:20:f5:3f:17:
0a:95:46:b9:36:7d:62:fc:d4:df:be:e9:52:61:47:45:50:e0:
d9:2e:c6:46:2e:4b:d3:0d:19:c7:af:10:f8:15:98:68:c5:1d:
73:24:31:cd:28:e7:3d:01:1a:bd:4f:d3:9a:3a:43:c7:cb:70:
24:1e:f5:4e:9e:90:4a:69:02:9c:af:7a:04:ce:6c:4d:23:44:
2d:a0:06:2e:42:04:8b:c8:8f:15:29:32:f3:88:86:f2:01:d0:
a8:c3:5a:63:77:e1:80:16:f5:58:3f:79:42:9c:e9:07:40:91:
41:bf:87:2c:6f:b0:a0:07:df:1f:bf:fa:51:ef:4f:62:bf:46:
b3:05:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:49 2025 by rpki-client