Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: mqZPFhvb0/w/XBiaBQMafz4tG2vAI5TLu+SUJ5fFWVw=
Subject key identifier: 27:E6:06:9D:6F:44:8E:D9:F8:08:00:C9:6A:E5:90:99:DF:67:12:2E
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 0198D4E0227EB38E65B308409AB864FD0009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0B74
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: r8KpUErLIwpZQuX7+7fvFqNp49+saD+1h1Y5cqDwrWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:22:7e:b3:8e:65:b3:08:40:9a:b8:64:fd:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=27e6069d6f448ed9f80800c96ae59099df67122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:1e:b7:7f:57:75:30:45:81:c2:74:61:3d:
ba:48:cb:a7:66:4b:95:a7:19:d6:39:a6:2b:29:f6:
67:ee:b5:00:db:ca:53:a7:22:67:b2:68:cc:28:a2:
88:7f:81:a2:71:73:49:e8:5b:91:7a:02:44:6e:3c:
7d:b2:ed:aa:ad:19:80:31:0f:d3:9f:d5:23:48:4b:
7d:4f:df:de:00:85:17:9f:40:2f:17:dc:5e:56:09:
72:c4:c6:5c:a5:19:45:b8:07:85:d0:07:4f:8b:45:
12:53:f1:24:8f:7e:89:08:a7:b7:72:e5:f4:a3:62:
2c:fa:72:f4:cd:56:4c:1c:63:f2:81:7e:ba:3f:18:
7a:44:ef:fa:ee:e5:6f:ea:80:07:db:f2:e8:07:93:
f3:fd:c1:bb:97:09:f4:3e:c1:f6:2f:69:2d:89:ef:
b3:27:e4:55:eb:a0:7c:07:e7:55:9f:b8:d3:c4:d2:
dc:8b:29:fc:2f:dc:bf:c0:fc:c8:f5:eb:71:96:44:
be:05:58:8b:a7:4f:81:64:ae:78:bc:7e:9a:0d:d2:
bc:2a:61:be:1c:74:33:d9:6b:5d:02:e7:db:94:42:
90:08:72:f3:c9:40:79:f7:39:41:0e:66:e5:3e:9b:
1c:4f:d3:fb:0c:bd:84:ef:2f:6f:ee:fd:3e:f8:36:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:06:9D:6F:44:8E:D9:F8:08:00:C9:6A:E5:90:99:DF:67:12:2E
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:56:c4:af:98:11:ca:e7:c8:7b:67:58:ad:ae:fc:3f:28:ca:
e0:9f:ea:f9:88:dc:e0:34:40:6d:13:17:35:13:fa:14:81:20:
91:87:1a:64:93:19:9f:bb:12:b0:49:a8:00:d1:fb:7c:c9:5f:
b1:64:2e:fe:d0:ae:98:60:cb:86:ba:55:77:ab:b1:37:0a:4b:
8d:9f:fd:6e:2c:27:de:5c:07:c9:6b:59:a0:9b:07:91:22:b0:
d4:98:4c:a0:fe:86:4e:88:16:2c:e0:79:92:c7:0a:69:97:b6:
bc:76:b9:35:b6:90:06:6a:27:84:25:c2:cc:aa:da:3d:cc:77:
83:5a:e7:e3:87:e5:ad:18:16:c7:bc:fb:d7:df:05:92:c3:74:
92:54:dc:2f:3a:89:03:73:74:99:df:01:19:8d:92:42:df:39:
d6:53:d8:1e:11:87:a1:f1:4e:fe:4e:49:cb:f4:55:93:8a:a2:
1d:0c:c7:ce:c1:e6:de:13:e6:f4:1a:48:66:a9:44:bd:b7:2a:
ee:48:2b:d4:12:d6:55:83:50:6c:2e:9a:5e:73:cf:ff:ce:64:
ec:a7:7f:cc:04:0f:75:85:ab:eb:31:f4:c8:e3:6b:65:b6:cf:
76:8d:8e:e9:bd:6b:56:22:e1:e2:74:1e:72:51:ce:49:7a:9a:
b2:d2:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:32 2025 by rpki-client