Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: PRG77fh8/fhwZ2XLtr0LdNIDLGfm3F2kdd1wewe9LgQ=
Subject key identifier: 89:71:D8:37:A7:17:5D:B1:B3:1B:73:2C:6A:80:29:3B:FC:B5:C2:C9
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0198D4A8136EA4D1176C967F8C58294FDF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 02BA
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: WsJkko6r3v2C8K+5vyJmmSE+A2RfcPtLxc8g/6IjmiE=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:13:6e:a4:d1:17:6c:96:7f:8c:58:29:4f:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=8971d837a7175db1b31b732c6a80293bfcb5c2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e6:4a:ca:bc:26:6b:d8:62:62:a4:a2:66:0b:
53:46:eb:dc:e8:ca:2b:53:fd:8a:9e:18:38:f8:93:
19:db:50:c1:e7:c2:8a:09:5d:c8:59:05:b6:a7:ee:
82:e3:60:d5:d6:a0:8d:45:6c:2d:10:4e:6f:49:13:
69:c5:6d:84:ba:c8:47:6e:fc:b7:c4:bf:84:78:a7:
ac:fe:16:f7:dc:b8:09:f3:a9:7f:fc:3a:b9:1a:00:
6a:61:95:a6:ac:48:25:9e:00:8c:62:b6:ab:b7:24:
08:93:90:9d:19:25:0f:19:8d:85:4f:14:43:96:52:
50:a1:8f:4f:97:24:91:d8:75:b4:8e:75:75:4e:2a:
1d:97:eb:57:72:86:cf:82:09:1b:19:0f:19:2a:c3:
3a:e1:92:ff:e8:ee:96:97:c4:7a:bc:02:b3:29:16:
ca:65:cf:7e:d8:93:98:f9:09:7d:54:f5:dc:90:81:
87:15:97:7d:97:82:63:f2:d8:52:4d:8b:33:db:89:
a9:66:a2:8c:79:39:61:4a:ff:3d:70:ca:ca:65:a0:
2a:a6:02:d1:b2:cf:26:92:ce:49:b7:d4:a6:e1:63:
88:04:ad:45:ad:4e:04:a0:6a:2a:f2:c2:f2:01:7c:
17:28:31:bb:90:dc:16:ae:cc:6c:f4:68:7f:7b:b7:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:D8:37:A7:17:5D:B1:B3:1B:73:2C:6A:80:29:3B:FC:B5:C2:C9
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bf:94:83:a4:14:f0:2e:58:34:52:95:1d:eb:59:56:1b:f9:
fd:f2:0b:0d:a5:d7:2b:92:5a:c1:46:1d:68:0d:ef:50:da:64:
63:ad:62:e4:8c:6f:e2:80:aa:3b:c2:37:a3:8a:c9:10:74:87:
65:08:c3:3c:57:7a:6f:87:73:37:3d:27:e3:49:96:2f:f9:69:
67:25:05:36:1b:fb:15:16:4f:1f:a1:99:6d:41:98:aa:96:4c:
b0:ce:f2:9b:7a:3a:e1:67:de:58:d7:39:6e:c5:63:b1:ec:52:
fc:a3:8d:0c:cb:fa:fa:17:1e:a2:5d:bc:d8:5b:28:f9:96:5f:
be:43:ab:13:60:af:55:27:f3:72:38:f2:30:de:9d:dc:c6:a5:
c4:2a:b9:05:ee:73:d6:05:ea:45:d5:0b:5b:24:78:c5:a3:ea:
a8:0a:24:1e:5e:3d:9d:e6:cd:31:01:4a:bc:54:1b:de:97:26:
40:68:d0:ae:9a:37:58:41:97:a9:14:c7:c2:f0:3c:67:66:be:
31:81:ea:05:33:b7:b2:55:66:d3:1d:0d:a6:f7:d0:86:e0:a1:
b1:4e:45:e9:09:8d:e2:bc:14:68:01:be:30:0d:13:61:4e:91:
0a:3d:12:93:df:ae:15:6f:7b:e8:5d:d3:ce:27:88:89:d4:ef:
66:64:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:51 2025 by rpki-client