Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: oGVglPnoSGm55j5DSW7PSA7zSIu7I6GPEheKhymeNX0=
Subject key identifier: B8:CA:E2:A5:E4:8F:43:89:B1:7B:6A:91:0A:D9:AB:A0:7D:48:3A:DD
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 0198D472F08F7F406C196499C900D990387F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: afiAAaBOHBv/15f75wi1s23lZVfjI73hqee8axgN7SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f0:8f:7f:40:6c:19:64:99:c9:00:d9:90:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=b8cae2a5e48f4389b17b6a910ad9aba07d483add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:e9:3e:88:f8:46:2f:25:c5:5a:71:6e:aa:
d3:c7:6d:5c:f8:f1:34:cb:83:17:4a:f3:38:6f:74:
65:e1:0e:8a:39:f2:ac:f7:5a:78:e5:9e:2b:40:c7:
3a:a5:c3:43:24:c0:8c:a9:23:89:2d:54:82:88:cc:
e3:63:01:74:86:3d:2b:da:0b:a3:01:40:21:20:13:
b5:62:a5:49:e9:c3:b2:e2:68:f9:d3:f4:17:09:ca:
1a:10:d8:2f:7a:f9:97:f0:54:9a:cb:39:13:4f:73:
c2:1a:23:b5:55:7c:32:8b:ae:0e:dd:34:07:00:d6:
91:9b:01:00:17:fa:f6:0a:c3:e2:63:5e:69:00:c3:
89:83:09:5c:d3:12:41:6e:ad:0a:28:2f:1a:81:d6:
8e:d5:d9:d1:79:4f:ef:52:ee:a1:26:b3:c1:af:71:
c2:eb:f7:f3:9e:d2:ff:8f:21:9c:02:92:b8:1f:70:
12:c8:75:eb:d7:39:b1:af:87:d8:5b:c5:50:56:0c:
be:8e:aa:1c:dd:42:47:ea:4c:da:a6:df:eb:a6:71:
c8:9a:ef:c1:a0:96:20:a2:96:3d:44:5b:9b:04:64:
6b:ec:1e:24:ab:65:fe:06:6c:49:f6:59:bf:c3:c5:
d7:c3:93:06:bc:5d:c4:ad:9a:9e:ec:61:3a:e8:a9:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:E2:A5:E4:8F:43:89:B1:7B:6A:91:0A:D9:AB:A0:7D:48:3A:DD
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7a:21:96:a4:2c:90:a5:ef:13:75:49:66:ed:27:21:cd:2c:
09:2b:19:b5:b6:b6:d5:dd:33:5b:67:40:4f:77:88:fc:51:19:
c4:7e:2a:cb:8e:17:3c:95:17:f5:2f:ac:eb:25:57:6d:eb:a1:
04:fc:ff:6b:36:6c:2e:e8:85:8e:2a:23:2f:e4:b3:9d:a0:56:
8a:5a:d2:ec:07:9b:47:c0:44:01:ae:f2:f2:be:62:46:9a:9c:
43:df:dc:67:60:62:61:44:15:ee:d8:21:34:18:3e:d1:99:0e:
7b:f1:bc:c5:79:da:8f:91:34:62:a2:c6:21:12:3c:9b:1c:59:
ef:17:29:c4:48:a3:65:77:a9:e2:12:22:4d:77:04:23:b1:15:
b8:a1:bb:51:da:df:21:89:08:90:92:61:9c:35:38:89:fd:8f:
74:af:e9:f3:49:c0:9c:b4:bb:ba:45:9a:ac:9b:94:8e:88:2a:
ff:59:98:20:00:e1:bc:34:87:37:2b:00:ab:f8:3d:a9:b6:ad:
af:ef:76:64:d5:d0:79:4b:9e:1c:63:19:6e:c6:21:21:d0:a6:
ff:b9:63:8c:00:e6:d0:eb:fc:8c:da:41:2f:c1:bb:23:dd:5a:
34:a1:6d:36:dd:e3:80:43:7c:8e:bb:02:2d:4c:ad:ea:1f:92:
13:8e:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:16 2025 by rpki-client