Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier: x6I9+9c/eBQWDykXkIP7ztUU5RoeyHFAVui+OJwcr4A=
Subject key identifier: C3:9F:0E:A1:D7:61:C3:5C:AF:D1:E4:61:10:44:61:BE:87:2F:02:48
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 0198A1962389AFAF67B2A278F7E96ACAFFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number: 1029
Signing time: Wed 13 Aug 2025 04:00:27 +0000
Manifest this update: Wed 13 Aug 2025 04:00:27 +0000
Manifest next update: Thu 14 Aug 2025 04:00:27 +0000
Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: GBZHSCTQybCmT1F3KPDsx25SlLnXwKfAcOTEbr04Olg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:23:89:af:af:67:b2:a2:78:f7:e9:6a:ca:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Aug 13 04:00:27 2025 GMT
Not After : Aug 14 04:00:27 2025 GMT
Subject: CN=c39f0ea1d761c35cafd1e461104461be872f0248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:82:62:05:b5:11:03:45:b1:90:db:83:4d:
b2:0d:3d:99:22:6a:83:1e:b0:9f:60:3b:76:ae:af:
6c:ec:40:3f:84:02:d7:64:dd:62:c5:f2:94:c0:fd:
83:dc:d7:6e:a5:fc:30:4b:9e:df:b1:8a:40:60:ab:
b8:cf:ca:49:bb:a4:f8:8f:8c:2a:04:52:2e:9f:23:
d8:2f:73:03:b8:a9:0c:71:e3:7b:2b:f9:87:3f:1b:
22:45:bd:f5:a5:e8:2d:d8:e2:53:fe:c1:ef:f3:61:
d9:8c:fc:e4:5c:ec:78:8b:53:57:84:59:74:9a:13:
f9:03:9b:f8:27:e1:c4:a8:e3:64:fc:27:fa:de:cf:
80:0d:5a:1c:3e:ec:c6:5e:bc:a3:d5:21:b3:74:54:
c3:05:f4:65:2f:1c:8b:b0:6e:4f:64:27:49:7e:b9:
48:ee:d0:cd:54:2f:e6:4b:18:d0:e4:c6:77:d2:51:
4f:30:cf:eb:60:01:04:62:1d:74:b1:9b:4a:b1:99:
7f:ec:e8:8d:f2:c5:6b:50:77:0c:08:0b:54:3e:44:
f9:ee:11:53:c1:96:36:77:7a:48:8e:df:41:b5:14:
a3:11:26:1b:28:fd:77:a1:d9:fc:9a:09:c4:52:49:
bd:57:e6:52:a2:a6:66:f1:6c:e7:ee:e4:7f:4b:ce:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:0E:A1:D7:61:C3:5C:AF:D1:E4:61:10:44:61:BE:87:2F:02:48
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8a:29:a9:b3:53:65:55:b8:f9:06:21:86:f1:df:f9:4e:53:
94:d6:ab:e7:68:7e:f5:15:b0:75:5a:81:1b:20:ab:1e:7c:48:
fa:19:59:a2:7a:f6:f2:0c:8d:e0:aa:40:ae:62:8b:7d:ce:b7:
94:72:51:99:32:5a:27:f5:fe:e6:f6:ad:cf:59:23:45:8c:08:
cc:44:02:c4:08:cf:af:a7:18:c8:7a:31:b4:55:20:51:f9:1a:
aa:cc:e5:00:b1:9b:80:aa:cc:d5:4f:9a:59:5f:20:b1:92:c2:
1c:d6:c6:13:ea:1f:8a:32:9e:16:08:fe:2c:ef:09:e2:93:53:
6b:9b:7f:dd:bd:2a:7b:2e:c9:69:7d:a3:24:c0:37:ea:1c:4c:
ce:20:f7:c8:45:db:72:df:96:7d:ac:7f:5a:2a:5d:19:6f:5b:
47:ab:a7:c6:ac:3a:1f:6f:34:73:70:d6:31:1d:43:6b:db:a9:
e3:ee:d7:89:21:8c:b9:32:2b:28:45:8e:6b:bd:88:ec:f3:1d:
d2:84:ab:f5:de:a6:eb:5e:fc:9b:7f:a6:68:9f:18:9a:1d:5a:
5f:8f:37:77:cc:0b:d4:7a:12:61:7f:39:c4:77:3a:71:f6:aa:
0e:f8:d7:e2:de:7d:9c:2d:f1:da:f6:4d:74:8d:1d:e7:ae:7d:
f3:8d:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:31 2025 by rpki-client