Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: blB5vVe9cnDdYRI/RW8qgw0qT/pme1SuCr6VZnTdLaA=
Subject key identifier: 79:D9:4C:E3:5B:DA:9A:E3:54:8B:18:7B:BA:1E:60:8A:6F:B6:5D:A2
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 0198D515B787C68CA8815D6B053E59AA82B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0DAC
Signing time: Sat 23 Aug 2025 04:00:26 +0000
Manifest this update: Sat 23 Aug 2025 04:00:26 +0000
Manifest next update: Sun 24 Aug 2025 04:00:26 +0000
Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: 6YoFbDLKNuCFxw3Fn5xMVcB5WR2yezsr9To4zA9sB+8=)
3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b7:87:c6:8c:a8:81:5d:6b:05:3e:59:aa:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Aug 23 04:00:26 2025 GMT
Not After : Aug 24 04:00:26 2025 GMT
Subject: CN=79d94ce35bda9ae3548b187bba1e608a6fb65da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:f6:86:67:19:06:08:a7:b4:54:1b:77:97:
51:04:c3:94:78:0e:d9:3d:bb:1f:b0:fe:f1:33:54:
41:70:c9:4b:a9:4f:13:0a:cf:c7:4a:ee:b1:70:19:
e4:5e:40:ed:10:9d:33:c4:92:12:a7:87:0a:97:06:
5e:60:8b:6d:6a:b1:16:56:af:34:a1:54:1b:c9:1c:
81:18:c8:06:e0:de:6c:b7:df:d9:e0:da:ca:68:d5:
f8:6c:e8:9b:14:7c:3f:0f:3b:ff:4c:18:a6:9e:90:
cb:4b:35:1a:55:b6:68:74:53:55:5a:99:4d:d5:41:
64:27:9b:e7:f8:c1:2c:26:ba:41:eb:fd:91:ef:5e:
b6:ab:2e:18:41:41:f3:4c:d8:f2:43:01:88:04:b9:
1a:93:4f:90:57:bc:79:f7:04:7e:25:e9:5a:38:8a:
87:a2:2d:c8:b7:f4:d1:cf:be:2c:93:32:1b:42:9f:
b5:da:a1:3f:26:68:0c:3e:28:cc:2c:bd:53:47:03:
5a:4e:a5:a1:88:92:b0:77:7c:5e:11:1b:b7:d1:70:
8f:33:6f:d5:ab:ed:72:50:e5:38:ae:ee:2c:6e:ea:
78:50:08:d8:69:15:8d:f9:88:63:3f:fa:02:a0:44:
2c:6d:a8:65:da:2a:b4:3e:c8:73:19:4e:59:1f:12:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D9:4C:E3:5B:DA:9A:E3:54:8B:18:7B:BA:1E:60:8A:6F:B6:5D:A2
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dd:67:34:24:8c:55:d7:a3:ce:e1:4b:65:37:cf:f6:87:9f:
93:82:f7:d7:35:77:6e:a6:29:c3:8e:b1:e8:ab:92:2c:b8:5b:
71:bc:5e:14:de:6e:0d:d2:9d:d6:a0:2c:ab:1c:c5:4c:2c:8c:
83:aa:9f:2b:41:90:aa:d8:5c:b4:fc:b8:3a:02:69:19:50:13:
16:b9:db:7f:d6:6a:7b:1c:76:e3:67:55:5b:f7:b7:fb:da:e2:
99:e8:3d:0c:c4:9d:2c:8d:19:1d:ad:b3:30:7b:df:b3:22:eb:
a1:e3:e3:75:9c:ce:93:77:64:71:ec:b7:ca:92:ab:04:65:af:
0d:a5:38:e5:fc:7c:ec:82:dd:6b:b8:ee:ca:04:07:2c:b7:de:
ef:44:aa:88:26:a8:1f:c2:4d:49:5c:b0:a6:0e:06:0b:c1:c5:
5a:92:5b:30:49:6d:38:ae:99:2f:4b:8b:bf:6c:b9:cd:75:b9:
69:fa:78:70:6b:91:57:d0:91:77:cf:6f:c9:9c:90:b1:6e:49:
2f:50:6d:55:5d:00:7c:1e:53:a5:b0:9d:30:7a:2e:dd:03:0c:
fc:da:62:67:b3:e2:4f:5d:60:9e:98:16:66:98:63:29:3c:ae:
67:37:7e:c5:fa:2f:b8:8e:51:ef:cf:62:b0:a1:20:7b:99:0a:
61:4d:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:26 2025 by rpki-client