
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: 8qJRfCR10UOg89CDSUyAVs8tO4X7RXQ/d8ELuCaoBpE=
Subject key identifier: 4A:0C:83:BD:22:FA:BD:3A:6E:D0:D8:3C:2A:11:77:FF:FA:BB:E2:86
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01989034D0AC36E0E03F1758A5E1F1BC8282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0EE8
Signing time: Sat 09 Aug 2025 19:00:37 +0000
Manifest this update: Sat 09 Aug 2025 19:00:37 +0000
Manifest next update: Sun 10 Aug 2025 19:00:37 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: d1KzuOV+s5Za9K0zbAuXCv8wVbdBOULSuFLALAP9f3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:d0:ac:36:e0:e0:3f:17:58:a5:e1:f1:bc:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Aug 9 19:00:37 2025 GMT
Not After : Aug 10 19:00:37 2025 GMT
Subject: CN=4a0c83bd22fabd3a6ed0d83c2a1177fffabbe286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:ea:78:31:86:b0:0c:5d:ad:cb:91:6d:e5:
84:1d:1c:22:eb:aa:4a:cb:17:5a:c3:f5:c9:58:49:
fb:35:d1:bf:f2:ab:cb:40:be:72:90:22:e9:94:fa:
8a:e0:be:9c:4a:de:df:38:8b:93:49:40:3a:a3:90:
85:ae:18:cf:82:21:e2:45:37:60:d9:6b:ec:de:e8:
50:9f:a5:34:ab:af:e6:8a:26:d1:89:71:ae:66:6c:
53:46:84:a0:91:c9:95:87:60:ab:02:4f:6e:9f:9c:
fd:8f:6c:1f:40:5c:a2:ab:d0:ec:f7:f7:cb:21:00:
71:7e:e4:02:12:e7:66:86:9e:7e:7c:b3:0e:ca:70:
f5:30:65:bf:ab:5e:41:bf:53:de:e1:89:9e:d5:0c:
5a:90:a8:bd:37:1f:ea:38:64:30:44:59:ef:e9:68:
bc:33:2d:31:44:e8:ba:d7:23:61:4b:fa:04:8e:60:
0c:85:8b:0d:0c:e5:ad:fa:70:e6:cc:19:64:e0:c5:
7c:49:fd:2e:a5:e6:24:fa:dc:9d:95:47:39:76:a5:
91:64:92:3a:f1:02:b1:80:e1:e6:cc:4b:b7:90:db:
af:5f:6f:e5:e6:8e:57:2b:94:57:db:91:16:d7:dd:
7b:0a:76:a9:d8:05:45:f6:4c:a4:19:e9:ef:2d:47:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:83:BD:22:FA:BD:3A:6E:D0:D8:3C:2A:11:77:FF:FA:BB:E2:86
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8f:55:e5:8b:e3:61:47:66:f8:fe:92:75:41:6c:b9:2f:d8:
de:64:a7:cf:3f:21:14:11:f5:da:2e:43:37:d8:f7:8b:4e:d3:
f9:29:80:7d:c5:16:f3:47:7a:9d:94:e5:0f:d6:41:d4:b7:f5:
ce:86:2d:60:37:9d:96:8c:d1:69:87:53:9d:51:94:02:30:85:
14:ba:44:4f:f7:6f:69:0d:93:6a:3d:87:76:b6:ed:12:66:cf:
39:bc:d3:f1:2a:9b:ff:35:fb:9b:ad:05:66:4a:4a:16:e8:bd:
f1:08:b3:c4:35:1b:bb:7b:40:6d:1a:02:b9:05:a3:7d:e7:1f:
56:29:ea:86:de:40:7a:4a:80:d5:38:ce:56:65:0f:aa:c3:3b:
d2:f3:80:46:47:51:54:09:08:fc:47:e6:65:b1:5e:ad:49:5b:
b5:a6:95:5d:a8:e7:c3:99:84:39:62:87:f4:f1:e6:f4:ff:03:
f9:12:3b:e3:e9:f9:fa:02:50:b0:5e:a0:2c:c6:03:c0:9a:65:
ec:52:78:e8:01:ed:c2:09:85:6d:bc:ad:e3:66:6c:89:a0:15:
cf:f5:fe:00:60:c4:c7:e2:b5:c7:1f:e2:72:46:ba:19:c1:da:
7e:84:37:44:00:da:8f:8e:eb:f0:eb:7f:fc:73:3e:e6:08:94:
ee:81:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:04 2025 by rpki-client