Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: fg3gyzSJJ7W6hV8E/fgsA757sgPJWXCxvPRLa/QX7y4=
Subject key identifier: C2:E1:25:C1:52:32:F1:FB:13:62:89:47:2C:73:81:01:CD:A7:23:CF
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 0198D7A8AE81533372160171D0F87C293258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 07C0
Signing time: Sat 23 Aug 2025 16:00:12 +0000
Manifest this update: Sat 23 Aug 2025 16:00:12 +0000
Manifest next update: Sun 24 Aug 2025 16:00:12 +0000
Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: EWhj2xS3XDaHDW7we1P1vYZWVztsFl4/JzLfzLMhuMA=)
2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ae:81:53:33:72:16:01:71:d0:f8:7c:29:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Aug 23 16:00:12 2025 GMT
Not After : Aug 24 16:00:12 2025 GMT
Subject: CN=c2e125c15232f1fb136289472c738101cda723cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:5f:5e:0c:ae:e0:ff:ea:f1:c8:a2:47:e1:
7f:ae:63:fa:2a:20:4e:c4:2b:23:50:f4:db:b7:51:
ce:c5:b1:2b:22:3f:a7:51:fa:37:53:1a:a6:2f:cf:
dd:6f:9b:98:14:c2:b2:0e:63:74:16:fa:a5:d8:02:
1c:76:f6:57:38:7a:f8:74:a0:4f:9d:e9:ee:4e:ad:
5a:07:88:8b:64:42:bb:f0:a8:63:1e:9c:e3:84:e0:
51:30:0b:13:de:06:44:65:8c:a7:bc:a7:08:5c:0f:
6d:df:a6:5f:d7:af:43:34:3e:8a:a9:f8:0c:bf:a9:
b1:79:34:83:8c:5d:90:26:c7:f8:ba:ab:0e:4a:5c:
b4:2a:57:40:72:04:8d:e4:f8:c4:07:cc:a5:52:d7:
55:9f:71:9b:7c:e5:56:5a:91:2d:37:5f:30:23:5d:
20:d4:3a:cf:1e:5d:e4:a7:61:25:e3:2d:7a:04:40:
96:c1:24:0b:f8:9a:03:39:33:8f:78:96:92:53:4a:
12:91:98:83:bc:21:ad:b8:a7:fb:5c:f7:10:ab:48:
ce:22:99:f1:68:57:f7:63:ef:cd:89:8d:8d:7e:6d:
98:63:94:7f:b9:d7:3b:10:fe:16:3f:eb:a7:92:1c:
b8:25:8b:f8:69:a8:3f:46:45:2b:0f:26:c1:60:c0:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:25:C1:52:32:F1:FB:13:62:89:47:2C:73:81:01:CD:A7:23:CF
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:e3:4e:03:b2:2d:cc:8d:81:50:84:9e:4b:af:de:4b:1b:
e5:11:22:e8:52:34:90:56:d3:0e:eb:11:ad:c8:6f:a3:7a:ac:
ea:e5:d8:eb:70:88:b4:08:c6:fd:d4:e5:b2:75:59:ab:4b:4f:
c3:63:bb:24:67:5b:09:c3:4b:07:d3:df:e7:35:06:87:5c:64:
7d:be:3a:9a:95:73:2b:77:4d:59:99:6a:fa:cd:84:c8:7d:af:
87:c1:d5:6e:45:ff:aa:2e:f6:dc:b6:e8:b7:18:a0:61:9f:7b:
e8:f0:15:17:d3:09:e2:1f:4c:0e:f5:38:cc:bb:41:11:27:8f:
cf:b8:79:9c:39:f2:d7:f2:96:18:a7:89:a2:6d:69:b0:df:a0:
9c:b2:25:64:00:c5:cc:e6:9e:ba:e0:e1:c8:47:56:69:69:19:
02:46:36:53:c1:2b:1b:ef:f1:0d:3f:38:a7:cc:cb:ad:90:b7:
4f:84:e9:6c:ed:36:c1:06:61:f9:6f:c9:d3:78:ef:2f:18:ed:
cd:b7:3c:78:16:c8:27:4f:75:ed:62:b5:7c:bf:50:77:e6:94:
de:af:6c:b6:63:30:16:47:a5:8f:4e:10:d0:70:d4:11:b2:1c:
c3:cf:3e:2c:14:86:08:92:fc:65:a7:d3:0f:73:8a:ec:6a:ce:
00:f8:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:05 2025 by rpki-client