Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: PGw4mFqn5X6Lq9/i+cX3EMs/csKTAqbysKrYmDDeYf0=
Subject key identifier: D5:24:B9:6B:C4:6B:F4:6A:7B:B2:DD:80:B8:27:D2:41:BB:16:02:3A
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0198D583A2887F60BC5052043C6B69038896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: GkS6hXza5gkNtSJ0mREGLLlhg0piiRBfCKbPYvbvEFY=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:88:7f:60:bc:50:52:04:3c:6b:69:03:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=d524b96bc46bf46a7bb2dd80b827d241bb16023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:2c:2c:da:cc:c6:50:75:d5:22:e9:8b:e1:
59:57:b4:70:4c:f6:99:e3:1b:1f:6b:92:f9:c8:d8:
1c:05:e6:58:5b:cb:89:c5:7b:e5:86:31:51:98:e2:
37:f4:c5:ea:66:db:5a:fd:9e:e9:60:34:50:02:dc:
8c:ab:6f:58:bf:55:a7:49:d7:27:41:93:eb:4b:15:
05:9f:24:02:07:c6:0c:a2:49:44:09:3a:43:53:a2:
3c:51:17:97:a5:c4:81:5c:d7:d5:e8:ef:35:fe:98:
81:4d:5f:fb:0f:fe:4d:4e:a8:49:2f:e8:39:3f:1a:
30:9d:dc:95:10:7c:08:57:db:b8:08:73:fb:a4:51:
21:7a:a7:84:f3:f5:0c:7d:c1:32:38:11:8c:a7:fa:
69:e8:3f:2c:b6:43:ae:83:2f:82:35:35:8b:09:c5:
c7:71:e1:52:d1:fe:3c:91:0f:c3:53:ef:88:d1:0a:
7f:1c:98:08:7a:5a:0a:52:19:84:80:fa:2f:0e:39:
65:0e:58:9a:a9:79:dc:28:5f:88:b6:f1:55:c4:a9:
9a:e2:36:f8:12:f8:ce:58:e2:be:a4:df:3d:83:51:
86:57:36:8d:34:65:e0:4e:54:38:28:54:d5:d1:5f:
9a:a9:f3:0e:1d:37:a7:61:36:88:07:ff:a1:c1:b1:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:B9:6B:C4:6B:F4:6A:7B:B2:DD:80:B8:27:D2:41:BB:16:02:3A
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:ae:7b:c2:35:74:4f:a4:20:d5:c6:67:0a:07:79:4e:28:
0d:dd:93:93:aa:14:33:ef:24:02:88:59:3c:10:30:d1:63:f4:
93:46:b9:d5:7a:14:56:3e:d9:5c:32:69:fd:aa:5e:41:4a:ec:
77:7d:85:89:43:20:f4:82:8a:da:ee:1c:10:71:0b:8c:3a:b4:
b0:83:af:0d:d4:c9:a2:b9:03:70:6e:49:72:b8:a7:c6:bb:5e:
90:84:20:18:53:95:76:0a:31:a9:35:50:26:94:d5:41:1d:ad:
70:c9:76:a3:5b:d4:6e:09:01:d8:33:ec:8c:24:d8:8b:55:1e:
26:f7:28:f0:5d:f9:b3:95:6b:bf:79:9a:34:f7:d5:a8:1c:ac:
e6:e1:53:4a:e3:af:3d:7f:30:54:0e:d5:8b:50:e4:da:a6:a2:
e5:86:a3:c2:85:9d:e7:9b:59:22:fb:9f:6b:11:4a:16:d8:4e:
93:37:65:68:66:9c:7c:52:98:50:97:44:cb:3b:58:5a:0d:17:
0e:3d:17:0f:74:dc:48:c1:ce:ab:9a:9a:d4:7b:16:4e:c2:87:
11:98:f6:9f:ac:59:45:ce:52:c4:ff:96:98:7e:6e:cd:9c:ad:
22:d3:f1:6f:fe:91:38:08:25:6c:28:d1:ed:20:49:66:81:50:
06:d7:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:17 2025 by rpki-client