Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: RuG1hQpAIPdXrmXvBgKCcMAuX49sFGBtCygWJ5yXgr0=
Subject key identifier: F8:EE:56:84:FC:1E:76:FB:74:C4:A1:8D:65:B3:8A:AA:05:FE:9C:75
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 0198D5F1B5EC26BA5FA24757CA4DB196F078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 30
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: 9ZOwaNTpAVIpkTaKGZcqOO0J4KonaNaQco5cO0OMdgQ=)
2: TTSyIzViMuPmm4r1I97cBnG33cE.roa (hash: /RwghgJbxiyCi6D+YecoRRM3krJG78rViLWnYxAONgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b5:ec:26:ba:5f:a2:47:57:ca:4d:b1:96:f0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=f8ee5684fc1e76fb74c4a18d65b38aaa05fe9c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:06:2f:ef:55:df:35:8a:6e:c6:5a:c7:a6:
db:15:99:87:13:d5:3a:22:2a:f9:88:5d:86:3b:26:
26:ad:93:25:fd:68:16:ca:af:e7:f2:6f:0a:5e:4c:
c5:de:55:e8:8c:b0:3f:2d:4e:0b:5c:af:1d:14:6f:
8f:ef:c4:76:f1:86:2a:df:25:73:34:f5:b4:6f:16:
c7:5b:7c:28:72:f3:48:fd:61:b1:00:5f:f8:d8:53:
80:a8:68:e6:de:fe:54:4e:10:22:c8:95:7d:cd:f9:
c9:69:a9:85:77:52:e3:81:f1:1e:77:23:d2:e8:50:
f0:a8:4e:13:b9:e2:b1:56:9e:9f:b1:c9:62:77:9b:
9d:8c:34:fe:12:02:8b:2f:bf:5b:dc:5d:a5:e9:3a:
30:cb:ee:8b:3b:99:be:4c:c9:ff:96:d5:a5:cb:f7:
c2:70:cf:41:d3:29:07:6d:33:36:5b:56:55:b7:cc:
b5:f9:6c:f1:91:f5:6f:3d:85:a3:7d:17:ab:83:44:
d2:3f:eb:8e:aa:d7:ff:99:c4:dd:28:1d:a4:10:b8:
06:1c:e8:bc:b5:86:d0:74:85:24:cb:6c:a6:9f:2c:
18:40:91:1c:63:61:a4:56:80:9f:36:ff:3b:93:8b:
47:1b:84:22:3a:05:56:95:c3:30:9c:0b:4a:d1:e0:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:56:84:FC:1E:76:FB:74:C4:A1:8D:65:B3:8A:AA:05:FE:9C:75
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:a1:2d:2d:58:4b:6c:9b:f6:f3:ed:54:f4:3e:a9:6c:51:
45:b3:77:6d:2a:34:b9:5d:26:e5:bb:6e:b5:da:94:f5:55:18:
d4:bb:3e:d9:4c:8c:56:28:42:91:82:c9:ca:f0:6e:10:61:7e:
2b:40:71:30:e4:05:09:bf:de:8a:4c:4b:fa:a8:dd:a4:59:d9:
ee:a0:ef:ba:df:e9:f3:37:c9:95:c0:69:b7:e5:7d:5c:ec:e6:
0d:d1:af:0f:84:0c:d1:38:96:1d:57:53:44:2e:d2:27:b3:bf:
f4:ad:c5:ce:62:8d:c1:53:6d:67:40:69:b5:20:64:47:1f:2f:
cb:c2:11:97:85:e8:9c:13:b1:ca:af:95:0d:22:a6:e7:7b:55:
bd:fd:7c:6d:9d:bb:c8:01:0c:37:9f:d1:45:ef:a4:75:d9:e8:
f7:fe:2e:d6:d4:b0:bf:e5:4d:43:65:ee:b7:d1:79:1f:58:70:
ff:59:bd:68:df:b2:b0:2b:7e:4a:f4:b6:d0:a4:51:82:a5:2a:
ad:77:ae:e4:c2:d7:ea:74:ae:50:36:d2:ba:89:44:03:14:a0:
32:f8:b4:28:57:11:5e:29:ef:4a:78:97:79:89:77:6f:c6:d7:
82:9b:70:0d:bd:7b:0b:67:95:77:e0:02:09:7b:72:6e:f0:ac:
ac:f6:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client