Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: UfxMxfpqSMFflH4XbD3sEnHxL4Li4uXlVkmkPY5Ef+A=
Subject key identifier: D9:EC:98:C4:1D:15:9F:F0:4E:9D:84:42:7C:C7:DC:64:BB:B8:82:A4
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0197B6329FBFF90971CDB17B9CEB845759A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: WhKJeBWaW2X4F3fBiRRszOW3WmIoLNraArqcDTJGrZg=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9f:bf:f9:09:71:cd:b1:7b:9c:eb:84:57:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=d9ec98c41d159ff04e9d84427cc7dc64bbb882a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:e2:c3:bf:74:c5:c1:c0:51:bd:d8:d7:95:
ae:af:19:aa:54:65:bc:5c:22:05:83:f2:1a:2f:27:
bd:22:48:8a:c4:70:3c:d5:27:3e:f0:d7:97:82:da:
d2:6c:cb:cf:3a:b2:59:90:41:8f:27:b0:4b:6c:6f:
f4:6e:9d:4c:bf:e0:15:82:c9:bd:2c:f1:8b:80:08:
19:42:ed:04:4e:60:e9:61:64:96:99:c5:ad:3b:4d:
8b:2b:51:c5:17:6d:19:a8:82:eb:3b:b0:90:2b:2f:
3a:40:6b:44:35:c6:a3:11:62:9a:2e:2d:f2:01:e0:
8e:54:05:9d:ae:44:51:f3:7a:ac:fa:3a:06:de:e0:
ab:e2:89:cc:87:f5:b3:1a:1f:3d:46:9a:f2:7e:0e:
26:77:2c:c0:21:b8:fa:98:e6:37:e7:8c:c9:41:1f:
30:f1:0a:bf:0a:8b:3d:d6:ff:ae:a1:a4:52:2e:5a:
4c:6d:8c:45:a8:64:d0:50:b4:3f:76:c7:bc:ae:55:
ba:e8:b3:a5:59:ac:f8:44:40:6d:c2:0e:f5:f5:e5:
87:6d:73:63:e2:07:f0:44:7f:c5:29:7f:83:ac:e8:
22:c7:86:ca:f6:38:9a:d6:33:21:bd:5a:6f:08:5d:
bd:f4:65:41:58:3d:1d:99:c6:d5:77:8a:11:3b:17:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:98:C4:1D:15:9F:F0:4E:9D:84:42:7C:C7:DC:64:BB:B8:82:A4
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:12:d2:bc:51:60:1f:70:a1:7a:a7:16:ca:10:6c:19:28:bf:
6b:4c:82:15:7c:af:5d:18:37:5f:ee:b5:aa:0b:8b:fb:b6:1f:
fa:b3:a0:af:2b:5a:bf:dc:56:0f:60:d4:cb:4a:40:a2:38:8c:
12:35:90:aa:e1:db:99:93:5a:c4:71:af:ce:13:65:a7:97:03:
0e:90:20:03:ea:29:4d:4e:9d:e5:42:81:c4:ae:61:fe:e3:8e:
9d:db:cc:d0:b9:dc:76:57:78:8e:93:79:c5:93:a5:48:44:f2:
08:b8:0a:67:55:75:8d:46:d4:1e:5d:00:bb:50:ce:14:c1:a4:
58:39:88:b1:a2:03:6b:fc:63:a3:1b:d2:78:7c:8b:6f:ec:e2:
1f:25:50:be:ae:2b:1e:24:2a:86:ff:69:cd:b3:39:da:4f:f4:
50:10:69:9d:88:38:75:b3:56:3f:f1:29:34:a7:ea:a1:9e:12:
d8:8b:72:da:a7:e6:0d:ce:83:66:06:d9:53:53:fb:e9:eb:bf:
f8:6f:36:a6:b9:d8:1d:59:14:15:c0:87:73:b5:93:82:cc:04:
2d:ab:8c:db:d3:45:88:6e:e2:9b:d5:f9:29:19:e9:f8:37:d7:
b2:de:4d:84:54:bc:6d:88:3b:c4:16:4c:19:24:50:a1:aa:64:
e1:7c:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:27 2025 by rpki-client