Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: 93SlqAtwU/qTpZCX8F6ZOmED+FuR9/X2tTGr8KUq7Jc=
Subject key identifier: 94:E2:19:B9:F2:67:0F:FF:B3:11:DA:8E:C0:5A:F8:BD:21:0B:CE:69
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 0198D51634867033D07BE1FAE5EC73AA8968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 4+hpzADp9o1HY6Q8gU9+DdvtdVC8zd32On+VdKx4yV4=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:34:86:70:33:d0:7b:e1:fa:e5:ec:73:aa:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=94e219b9f2670fffb311da8ec05af8bd210bce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:38:c5:d9:84:59:16:bb:b3:31:0e:88:97:
15:0f:fb:b9:44:43:a5:87:28:63:21:62:eb:13:11:
2a:94:e7:52:44:27:95:71:10:8e:aa:72:53:24:6f:
d1:cc:c1:27:32:d6:df:5a:1b:a6:ef:3f:fe:3d:ba:
ee:49:12:5f:e6:9c:f3:c1:c9:2b:cf:aa:2e:42:69:
2f:64:7b:97:d2:75:3d:3a:17:e4:60:60:3a:e0:25:
15:b8:b9:74:89:91:fb:b6:ed:c8:01:26:9f:d3:f3:
f9:c4:35:91:55:5c:e3:7b:fd:1b:3d:56:a3:55:8a:
61:69:aa:4f:d1:d4:5b:d8:a2:96:a1:91:75:a4:fe:
eb:77:bb:85:a8:f7:15:08:21:ce:2d:d3:f1:50:7d:
35:01:10:65:02:64:2b:38:6a:1c:3d:a5:e0:2c:e3:
1c:fe:72:6b:f3:8c:a4:d0:15:29:19:6c:af:ce:6e:
ce:91:94:e6:c2:ad:83:b9:e2:9a:22:2c:af:73:40:
16:fa:9e:30:bf:c7:f7:5a:4e:7c:4c:64:a6:07:ef:
4d:9b:8d:bd:f7:1f:4f:2f:e7:c6:d4:2c:0f:26:1b:
62:a1:71:06:bf:8e:ff:c6:19:be:1b:cb:6f:1c:07:
3a:a5:f3:5c:63:9a:44:ce:9a:62:74:81:0b:d8:01:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:19:B9:F2:67:0F:FF:B3:11:DA:8E:C0:5A:F8:BD:21:0B:CE:69
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:80:31:b3:c9:f8:ba:93:b5:7c:0d:32:95:f8:86:09:e1:
32:7f:48:2a:e8:d6:09:10:54:30:6f:b1:e3:c6:2f:3b:1b:01:
a8:0b:68:1f:eb:0f:91:b5:ac:aa:20:e9:de:6a:15:d9:0b:95:
c6:bd:a2:0a:df:4b:07:4c:12:1b:ab:c6:cf:12:25:98:e2:dc:
8f:98:8a:28:bc:68:d8:10:31:0d:cf:85:c6:09:38:32:2a:58:
3f:56:61:f3:c8:f1:63:8e:e4:f0:aa:7a:31:fb:74:59:b0:17:
3d:a4:56:dd:b4:a7:37:e5:ae:ca:b3:22:96:99:9d:fe:08:1c:
1e:1d:84:51:a7:6a:fb:89:61:3e:5a:a8:2c:c7:d3:88:d8:22:
9a:91:86:b7:3f:ea:bc:b0:ac:54:e6:b5:7e:24:31:e3:2f:91:
c3:fa:9b:86:27:dd:d3:7c:4d:5a:86:34:93:7b:4e:d2:b5:ea:
c7:fc:9e:d8:1f:59:27:88:55:1e:80:1d:31:e6:ef:ea:46:26:
03:48:d2:2f:f7:cf:c7:d0:9c:66:cc:5e:a4:02:c7:f5:4f:33:
ea:3c:69:bb:e0:0b:67:b9:69:b7:cb:05:31:22:b5:5d:89:7e:
b3:d4:93:80:fb:9e:07:a9:5b:d8:21:6d:35:9f:b0:35:0e:f9:
7b:03:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:41 2025 by rpki-client