Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 21o1yrhloccLveytTCap5b+2G5i8Caym5dLSXSEFpUM=
Subject key identifier: AF:16:25:CD:44:AA:0E:8E:E1:3D:1A:45:43:0D:EB:1A:D3:6E:B8:E6
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0198D5F1557DAAF61DF5BD7CEBF9A770FC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 12E9
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: 1tlLhEW6xo1BMM9sz54PvO4CdInUNXBGhFAYZgvBQY4=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:55:7d:aa:f6:1d:f5:bd:7c:eb:f9:a7:70:fc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=af1625cd44aa0e8ee13d1a45430deb1ad36eb8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:89:22:b0:ad:db:b8:90:e2:56:ba:4a:e9:
95:ed:a6:99:10:92:1a:8a:12:23:40:40:1a:b4:2e:
8f:c4:72:5f:2b:a9:61:e0:08:19:ae:b8:d4:0f:28:
ac:02:0d:14:5b:78:40:c9:07:f4:50:61:7b:34:86:
e2:fa:e3:29:c8:7a:e0:a4:e3:15:49:14:2d:a5:2e:
22:6a:39:f3:24:f9:c7:fa:9f:1f:03:4d:1f:c9:f6:
8f:9d:6e:5e:c5:4b:2b:e3:41:16:4e:5c:33:5c:d5:
65:1a:dd:9e:b6:76:44:f1:f2:6d:76:8c:35:e7:4c:
eb:c7:11:bc:ae:60:2e:5f:1b:a8:de:c6:b7:91:5e:
2a:45:92:fa:b9:e9:30:af:c1:a2:d0:34:16:ff:d6:
81:2a:1e:fe:06:3c:ef:79:84:bc:39:a0:d2:4a:2b:
41:f3:4c:1e:6c:35:dc:a8:cf:c4:9e:d7:d4:f7:f7:
df:10:00:4c:b4:c6:d7:43:94:3c:80:de:52:12:09:
8f:df:74:c0:fc:2b:ce:6a:5b:4b:73:f0:9f:7b:03:
0f:b0:53:34:7c:97:e6:81:cf:6b:f4:6c:29:bd:9e:
47:2b:f4:51:9c:87:70:64:06:00:4f:2a:a1:74:6e:
b7:ff:a8:d7:56:a8:0b:d1:07:52:c8:e7:c8:9d:8f:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:25:CD:44:AA:0E:8E:E1:3D:1A:45:43:0D:EB:1A:D3:6E:B8:E6
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:40:4c:88:b8:0e:4e:1b:39:97:32:5b:03:e4:3a:ee:c4:bd:
89:1f:ae:4f:b6:13:3e:51:05:ce:50:81:b2:b9:bb:61:2a:d5:
be:fb:89:e8:38:50:8b:73:3f:03:e8:14:e5:b0:30:7e:9e:ef:
33:44:4c:45:f1:cf:50:4c:b7:9a:bb:68:f8:a5:f8:1f:6d:0f:
8d:77:6b:9e:25:33:21:ac:da:45:40:c3:1d:72:13:ef:b4:76:
70:39:9f:a8:8d:19:16:4d:81:2d:1b:e4:5b:43:cc:b2:18:a2:
69:44:37:34:8f:1b:2f:11:98:47:76:08:41:fb:6d:d8:78:6f:
7c:73:be:a4:a7:57:42:bb:c0:f3:dd:35:35:60:aa:d0:d7:3b:
88:36:34:06:0e:2e:15:22:8d:a1:ee:4e:55:16:7e:13:78:54:
2f:fb:78:42:01:2b:c6:9d:fe:a0:f0:b3:ee:f9:44:06:73:df:
93:89:bc:33:21:6d:78:f7:96:a9:56:97:56:d3:f3:4d:2d:f0:
5b:ad:b3:95:72:87:dd:15:ee:fb:b7:cd:90:12:b2:2c:c3:bc:
39:c1:46:c8:1b:16:ce:44:79:b3:a0:8c:7b:67:76:2d:c5:ee:
67:34:05:23:12:4f:ed:8c:19:bc:ad:43:64:e2:18:21:a1:f8:
d1:b4:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:50 2025 by rpki-client