Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: iqycoa8mHLkT8In2nzvsVdWUDp+5/5PJx5BwfByjMIs=
Subject key identifier: 97:F6:E6:C8:74:D4:6B:65:A6:30:8F:A5:41:31:F9:4E:65:E9:AF:FE
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 0198D54E3B672DE6CB8B330DB6C09D9AC3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: ypa06UzYeCqmuSF/0T5L4HzJiwpvl9xRCnQ0vTqtHHs=)
2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3b:67:2d:e6:cb:8b:33:0d:b6:c0:9d:9a:c3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=97f6e6c874d46b65a6308fa54131f94e65e9affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:07:de:26:4f:e8:86:c9:0e:2b:53:99:a6:
b1:ea:c9:79:0d:b1:d4:de:46:e5:5a:15:04:7f:65:
95:91:8f:23:61:8c:49:c7:1d:a6:9e:7c:28:24:fd:
1b:61:cb:96:e7:32:1e:09:16:b5:6c:ba:41:64:56:
e5:9a:d1:67:97:f8:9d:53:1a:8f:b1:e1:79:9c:2f:
ff:b4:ef:8c:fc:9c:7d:5a:4b:5a:b6:38:50:43:f1:
20:82:5c:31:83:ad:9b:8c:46:3b:c9:d1:fd:dd:86:
c2:03:f7:db:db:88:12:25:27:9b:7e:fc:19:ce:4e:
aa:2c:73:fb:cb:69:7d:e9:e2:89:c0:c7:82:1b:d9:
3f:f4:b3:75:97:c5:12:b7:01:71:dc:c9:c9:1f:de:
78:2f:45:4f:14:76:60:49:d2:6f:cb:8b:7e:f3:d9:
4a:9d:1e:50:27:77:ec:b4:6a:0c:ac:ac:7e:db:58:
9b:06:5d:85:1a:5c:c8:bc:13:15:78:49:be:22:b8:
82:af:d7:57:27:4c:63:ea:45:d0:c8:5c:7e:fc:8f:
2f:d0:52:24:f8:28:d7:80:67:9a:cd:f5:4c:a2:3a:
d0:2b:28:54:d1:d8:a7:10:cc:85:2d:8e:c8:9c:7f:
46:56:26:05:51:b1:1b:7f:7a:9c:50:6c:85:58:0c:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:E6:C8:74:D4:6B:65:A6:30:8F:A5:41:31:F9:4E:65:E9:AF:FE
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:38:c9:97:c4:59:c8:9e:87:ae:5e:e2:a7:d4:fc:66:05:0f:
39:6e:17:82:a5:99:45:d7:8b:c3:d3:c4:1e:ce:83:a6:f7:29:
88:8b:e5:ac:85:8d:24:48:9e:07:a5:f3:fa:e1:98:00:d4:ca:
4f:94:be:43:35:06:1d:11:e6:b8:02:3c:4c:b9:0c:d8:7a:e2:
27:e6:c3:32:e2:91:2a:ce:5c:a6:5e:1d:e9:3e:84:09:9a:e5:
ee:a1:e3:25:e5:ab:55:f1:fa:c2:30:96:2a:a4:7d:20:1d:8a:
a6:cc:b7:43:e2:93:26:87:7f:6d:9b:2b:46:08:39:65:5a:23:
af:82:42:43:1c:b2:fe:7f:e1:3c:9f:ec:c3:d3:3b:eb:47:48:
11:f8:dc:ab:34:23:04:49:42:17:3a:88:17:02:c7:e7:9a:0f:
a5:20:1e:6f:23:53:3c:c9:b8:64:90:45:f4:49:04:97:66:f6:
67:51:a6:5a:12:35:e8:53:17:e1:39:14:f1:95:01:e8:e4:e0:
9a:8d:3d:ac:b5:8f:9e:96:14:5a:bd:ac:fc:db:8f:47:ad:0c:
5e:89:ba:da:11:ad:76:40:57:43:7c:7f:28:03:8f:e8:4c:6d:
4f:0b:de:68:5e:58:0f:39:ad:3a:9e:3f:42:a4:91:b5:3d:0c:
cd:cf:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:18 2025 by rpki-client