Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: XNv9Ia6IntAJC5mMxehLzIrxOYZw0intUdy5YoGJ0fY=
Subject key identifier: 0F:6F:F2:3B:B3:FD:96:81:4B:CF:A9:AA:C9:77:FA:B1:81:3A:08:85
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 0198D4A788F4DE33AF2ED434E4C467D2CFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 03AF
Signing time: Sat 23 Aug 2025 02:00:06 +0000
Manifest this update: Sat 23 Aug 2025 02:00:06 +0000
Manifest next update: Sun 24 Aug 2025 02:00:06 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 2cdAHzetxMIl0XbxT1SPr8ol/F40TIuZnf1SoUYZpZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:88:f4:de:33:af:2e:d4:34:e4:c4:67:d2:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Aug 23 02:00:06 2025 GMT
Not After : Aug 24 02:00:06 2025 GMT
Subject: CN=0f6ff23bb3fd96814bcfa9aac977fab1813a0885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:21:c9:d7:37:d4:6a:ab:31:49:02:45:54:
ad:ba:cd:4c:c3:4f:73:f6:2b:fa:8d:16:39:72:86:
56:20:4e:75:34:d6:ee:2e:8d:48:c6:e7:ca:0b:e4:
76:65:13:12:e6:69:2c:b4:28:c7:aa:a2:b3:4f:b3:
43:40:3d:c1:bd:ad:de:74:7a:c7:74:7b:53:a9:82:
ff:c4:cd:fb:e3:57:fe:de:d0:d4:74:99:04:f5:b2:
90:16:ca:48:a5:3f:11:28:62:be:85:9c:5c:a9:7d:
ce:6e:3c:11:b6:ac:c0:8f:90:6d:3d:1b:37:c1:5d:
35:6a:8b:5d:18:df:1d:43:4d:99:26:04:ba:b0:1b:
7c:3c:bc:df:7d:b9:38:24:6d:f0:70:0f:e8:93:27:
a0:41:fb:f4:83:04:2c:30:6b:e4:65:22:3f:5b:04:
0d:96:55:5c:1f:81:85:ad:09:c3:1f:9c:3d:56:3b:
57:ef:a7:bb:9f:3c:05:d4:3e:9b:dd:34:a1:62:16:
1d:8d:1d:4a:be:c0:8d:32:93:ce:ce:9e:8f:c2:0a:
ff:e5:48:27:87:08:4d:e1:92:83:93:28:e5:1d:7e:
4d:b7:76:b0:d6:42:86:48:bd:99:fa:c6:3a:e0:69:
70:ec:ef:03:5a:95:6a:24:5a:9e:d1:df:65:84:be:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6F:F2:3B:B3:FD:96:81:4B:CF:A9:AA:C9:77:FA:B1:81:3A:08:85
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:39:b7:f7:c0:c6:00:0e:8b:3d:d1:6e:d4:23:80:12:4c:
1a:bc:57:b3:d2:e5:b7:21:cc:34:0e:32:3a:30:6a:94:18:c6:
ea:f6:49:24:a0:b4:28:c9:1f:48:66:24:dc:85:2e:b0:3d:ee:
0e:a5:ad:ed:51:76:c1:b3:cf:22:b7:5e:eb:06:cc:bb:36:e3:
2b:9a:5f:53:02:9b:ba:c4:cd:a2:84:40:28:b2:94:8b:ef:db:
c0:85:13:cb:6c:9b:69:ed:29:77:2b:11:97:2e:3e:d8:7d:bc:
e8:34:14:25:2f:9d:8f:db:95:10:66:a4:91:ec:2f:10:80:31:
4a:25:d2:51:cd:10:dc:77:a0:a0:52:56:b4:d1:ce:50:73:c2:
e2:50:54:5c:df:df:f4:b4:08:96:2e:89:27:8c:ff:24:69:57:
68:b4:41:30:ff:2d:dc:dd:33:30:6b:b0:48:ae:b9:52:e0:8e:
f9:d6:2a:a1:85:75:92:93:ee:e0:b9:b3:3e:f6:13:e7:bd:ec:
1f:ce:0a:9a:b6:50:31:ac:af:fe:e7:5b:3a:fc:f2:c4:10:e9:
4f:9d:9c:6f:98:b3:cc:27:a8:d8:ac:a7:20:ca:fd:dc:48:57:
72:79:70:2c:69:04:78:53:7c:75:9e:26:59:d8:5c:56:b8:d3:
a5:d2:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:55 2025 by rpki-client