
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: mHANoFTIT/oupf4zxELF/dXewt0PZ+DjxKlqn1cF/X4=
Subject key identifier: 4F:DF:19:3E:75:09:04:CF:8A:9A:DA:48:93:AC:2E:4F:44:49:BD:72
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 01987306F8B273641ED42A954619380DCB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 0422
Signing time: Mon 04 Aug 2025 03:01:33 +0000
Manifest this update: Mon 04 Aug 2025 03:01:33 +0000
Manifest next update: Tue 05 Aug 2025 03:01:33 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: hKKhiYlg8G7F2QPZbpxxqG1M4890V2Cui3kzLUb/shY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:f8:b2:73:64:1e:d4:2a:95:46:19:38:0d:cb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Aug 4 03:01:33 2025 GMT
Not After : Aug 5 03:01:33 2025 GMT
Subject: CN=4fdf193e750904cf8a9ada4893ac2e4f4449bd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:4c:b8:5d:29:24:6f:e0:9f:05:af:ea:9a:
55:d3:af:9d:33:d9:d2:68:bc:21:da:c1:69:17:1a:
e7:cc:6f:fb:d1:32:c5:11:3b:b1:af:2e:9d:bb:a7:
5c:35:2d:00:ae:9e:ba:69:cd:84:67:3c:25:17:f8:
ac:1b:ed:4b:18:90:87:61:b4:22:14:2d:ea:ad:7c:
be:89:39:4f:4a:f0:11:f6:3a:bf:d1:26:60:06:a5:
3b:6e:5e:a1:11:0b:48:6e:36:ce:bf:bd:ed:65:50:
f4:6b:33:7c:54:12:2c:34:a8:df:2b:00:2f:20:4f:
d5:a0:bf:0f:e7:0d:2d:71:3f:1d:72:87:6b:90:a5:
b9:32:47:ee:c0:ec:cc:9b:48:d9:d4:df:7d:29:51:
ec:ab:44:98:93:6a:ed:b3:d4:16:ce:aa:a7:75:3c:
6b:90:fa:c6:df:5b:57:b5:cc:1a:8b:94:fb:67:fa:
98:75:a8:ec:e1:50:97:5a:a1:5f:d3:83:61:c2:cc:
38:54:13:69:1b:4b:03:44:7e:bd:aa:71:1f:75:5c:
8a:1c:cb:0d:1b:55:c0:9d:72:79:26:ab:1d:f5:9b:
2b:c9:a6:c1:5b:35:f4:cd:81:f5:b3:49:87:79:f2:
be:a7:63:94:1a:12:2a:52:bd:66:cd:4d:d4:3c:fd:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:19:3E:75:09:04:CF:8A:9A:DA:48:93:AC:2E:4F:44:49:BD:72
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d4:f8:cb:c3:0a:31:05:05:e8:33:ea:97:6f:12:51:2d:88:
e7:55:e8:2b:66:67:2f:df:84:de:ba:8c:e8:02:69:78:f9:78:
06:91:97:44:b8:f0:d1:56:68:0e:4a:bd:e7:19:5f:35:af:68:
0e:52:d3:ad:42:56:fd:64:9d:d8:f9:8c:6e:2f:46:f7:28:92:
8a:c0:b6:27:04:c8:e1:ae:a4:da:6b:5c:43:46:18:09:77:1e:
c3:a0:ea:bc:ce:68:35:f1:d6:a9:da:9b:ec:55:19:75:b1:85:
ec:a9:b0:0f:20:f5:3f:d2:16:6d:0d:c9:12:a5:59:45:67:b9:
6c:a1:a5:d7:b4:58:25:a8:0d:c3:d0:f0:a9:b5:67:9c:96:0f:
db:f5:51:a1:f4:90:8d:b1:08:b1:60:8c:0c:ab:3a:da:3a:15:
c4:c3:50:34:b0:80:aa:79:66:ac:3a:2c:7e:13:4f:21:57:25:
f6:81:c5:42:ec:29:93:54:8b:15:b2:bc:99:5c:84:25:3b:b6:
82:cc:66:7a:03:b8:fc:0f:57:9b:bf:c5:32:cc:40:d9:53:b3:
89:5d:7f:56:af:d5:1f:65:61:88:fc:e2:a3:b8:ef:1e:63:c4:
bb:43:f5:b7:d4:de:68:ec:7c:4a:e2:69:cb:43:45:14:93:09:
2e:fc:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:09 2025 by rpki-client