
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: QOTG4Dx3ExfAjgEvwJ97O88QyP/T98x9s4tJtrW0bd8=
Subject key identifier: 26:58:EA:8D:4F:53:81:C7:99:FF:70:66:8D:62:93:89:15:70:99:97
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 0198D5833FE42B9378C26DF5D91098511BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: p6ZR/+N/lndRWH1p03MYbU12NNxKTblOFb1vCocbDc0=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3f:e4:2b:93:78:c2:6d:f5:d9:10:98:51:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=2658ea8d4f5381c799ff70668d62938915709997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:6e:74:fa:6c:d9:fe:7c:9a:e4:54:a6:b8:
d6:74:f3:2e:ed:2a:cf:c4:ee:87:93:c8:54:b7:1f:
8e:08:eb:05:20:50:59:38:b5:1f:6b:c5:c3:3a:1f:
dd:07:4d:51:72:78:ad:47:78:2d:0a:20:69:11:ff:
cb:35:d0:c7:3c:80:a2:25:b7:8a:67:05:2a:3f:63:
72:8d:df:12:c1:47:16:5d:17:df:6a:fd:ad:24:4d:
b6:af:a3:1c:25:a8:28:ad:74:eb:ae:73:ad:98:fe:
27:d6:86:e5:57:b5:50:05:51:54:f2:bc:f6:97:de:
38:38:26:fe:e1:cb:f0:d9:93:d5:74:f4:3a:92:3d:
b2:39:b6:d0:de:68:e1:10:f1:f0:df:8d:7c:b3:7f:
57:79:89:cd:df:65:1a:95:79:a9:84:ff:d9:44:6a:
9b:ba:41:85:f9:fd:34:1e:40:22:f7:50:6f:88:90:
27:63:65:9d:ba:76:30:a4:a6:01:33:3e:a2:c7:b5:
b3:a6:1e:79:fa:3d:21:64:d8:6d:30:6b:70:c2:2b:
71:44:c4:27:2e:41:7f:59:a1:e0:78:e7:6a:94:dd:
0e:df:5f:8d:f9:5a:2e:bb:a9:52:5a:cd:5d:ae:d9:
7a:eb:bb:2c:d7:dd:d7:cc:14:19:36:2c:f1:bf:0d:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:EA:8D:4F:53:81:C7:99:FF:70:66:8D:62:93:89:15:70:99:97
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2b:02:27:7e:56:9c:fc:a8:6f:db:23:f8:c4:90:2d:b0:49:
39:ae:31:f7:57:b4:21:d2:fc:a0:11:58:96:a0:aa:5c:4a:c3:
9a:14:7f:e9:5e:67:f8:a2:c6:89:7c:50:8d:1c:57:a5:1f:53:
af:b5:a6:c6:0d:1f:bc:dd:cc:6b:7a:73:34:e8:fd:07:0f:02:
ab:ed:d9:2a:bd:b2:4e:63:c5:52:1f:93:33:79:a5:2e:a0:00:
e9:aa:7b:3e:24:c3:fe:82:92:ac:b9:1d:59:30:3b:4d:5f:41:
e5:9c:a2:e5:51:3e:f3:09:00:23:9a:55:8e:9b:fc:a3:50:db:
c6:c0:05:0f:87:3d:9a:c9:ca:2d:22:4c:45:3a:64:6e:b5:a0:
46:17:bf:6c:4a:79:08:e1:f7:71:57:67:e1:fb:01:a3:9f:e9:
72:44:f6:1d:3a:0c:bc:4f:4f:f1:16:68:79:8b:9b:6a:ef:9d:
a9:0c:51:aa:4e:16:52:68:1f:f3:ce:46:ce:60:73:c7:e1:9b:
84:cd:53:cc:1a:66:ba:79:94:2c:59:3c:1a:24:92:87:fa:9c:
16:0b:49:6f:d5:4e:b6:43:51:88:c3:e7:94:cd:3f:7a:5f:18:
11:cf:63:07:9d:23:28:28:3d:90:81:89:84:f9:60:dd:15:7f:
08:f6:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:40 2025 by rpki-client