Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: T2493X/0t0QdJ41Li930SJm0uNT1fB98MxwFtfr2Zb0=
Subject key identifier: B2:2A:F5:BC:0E:8B:EB:BF:B5:E7:FC:39:BC:36:9F:FA:C7:F1:01:71
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0198D5F187C54C6349DB655805C64A1E1E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: AhqgGmeeAMZaJvkRweH3ohnXtAP/2SDk2tPfB76jWQo=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:87:c5:4c:63:49:db:65:58:05:c6:4a:1e:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=b22af5bc0e8bebbfb5e7fc39bc369ffac7f10171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:f6:87:dd:96:a1:c6:8d:c4:10:4c:f3:62:
02:9e:61:f3:db:49:0e:3d:15:ac:fd:d0:8c:f3:b7:
1b:7c:74:c4:f7:a7:cd:35:f8:66:44:87:69:fd:16:
64:e6:e1:5a:54:65:d6:07:1c:33:e6:1c:d8:60:74:
b1:4b:cf:fb:73:fb:59:20:50:4a:c1:72:47:57:9f:
b8:05:d3:e9:d0:70:3b:aa:c7:73:d5:55:26:eb:c4:
f4:9a:aa:47:5a:77:95:14:31:83:92:64:0b:fc:52:
95:60:09:af:0a:4e:9b:1f:9e:8b:36:bb:5b:e0:32:
6f:3a:76:63:86:45:98:9a:d9:b7:40:54:02:95:03:
4b:c4:36:c2:6b:79:2d:09:1d:be:ba:1b:dd:e8:60:
4e:d9:6a:9e:91:0e:a9:e1:0a:cc:2c:f1:9b:90:29:
0e:4d:2b:1c:6e:4f:41:28:b9:1e:74:06:ea:e3:8c:
c5:b6:d6:d9:6b:87:74:0e:d0:25:65:04:71:fd:15:
88:33:1c:97:25:ff:da:bd:a1:97:b1:e0:e1:79:20:
e7:7e:0d:4e:00:6e:b2:8e:b2:17:86:5e:c2:ff:4c:
df:cb:a5:74:cc:8a:ed:9a:46:af:16:95:b6:a6:9c:
fd:9e:3d:67:db:4b:5d:61:d5:96:37:fb:0f:c1:e9:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:F5:BC:0E:8B:EB:BF:B5:E7:FC:39:BC:36:9F:FA:C7:F1:01:71
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e0:a3:17:7f:f6:2f:27:40:a0:a5:75:5a:46:64:bd:60:31:
a7:e2:0f:dd:63:9b:9e:91:51:e5:b3:90:a1:61:ea:3e:b7:6d:
54:2f:9f:ae:49:b9:78:b4:02:4f:ab:51:a3:99:af:b6:a3:aa:
3e:a9:f7:c8:71:df:5a:d0:30:f4:13:4e:6e:41:e0:66:e2:3b:
38:4f:37:2e:a0:04:ed:e4:7c:04:2d:86:35:03:c0:23:0c:78:
43:45:02:40:4d:e2:a9:29:83:54:c1:05:ef:ed:c7:9b:be:e6:
89:44:fd:4d:40:65:fd:96:98:23:07:1d:e0:70:e0:9c:18:78:
ef:0c:cf:3e:e2:19:99:19:a0:65:5e:92:19:27:1a:64:71:af:
60:32:c8:ef:7b:f5:3c:fd:ed:66:ee:aa:98:8e:61:f5:b8:63:
c7:46:f3:64:37:93:8f:f6:74:8f:e6:32:fc:4c:5a:87:64:01:
54:b6:20:ca:be:cc:5c:09:62:01:e3:a5:13:41:9d:41:16:67:
51:f1:52:47:4c:77:44:fd:0a:e3:18:ad:77:4d:91:b8:96:86:
d3:f1:f3:77:b7:1a:93:51:79:8f:a2:cf:1a:d6:d1:0d:9f:c2:
ba:d1:73:73:44:d0:78:21:82:e5:f1:f6:f1:cc:14:1a:08:53:
ea:1f:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:50 2025 by rpki-client