Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: phASkHwEf4eu1YfYm8Q797w8tpy+2X8j8v3RHOjCbWg=
Subject key identifier: DF:FD:FF:93:D7:87:25:62:57:82:17:70:5A:E0:9A:DE:EA:D6:40:BF
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0198D58349D54C8635761480CC98B37889B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0DE6
Signing time: Sat 23 Aug 2025 06:00:07 +0000
Manifest this update: Sat 23 Aug 2025 06:00:07 +0000
Manifest next update: Sun 24 Aug 2025 06:00:07 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: /0ClBtXSpkkYywFLHap2ZauffPd6CyCuR6y1KXjIwWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:49:d5:4c:86:35:76:14:80:cc:98:b3:78:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Aug 23 06:00:07 2025 GMT
Not After : Aug 24 06:00:07 2025 GMT
Subject: CN=dffdff93d7872562578217705ae09adeead640bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:27:6c:09:89:e8:74:78:db:02:7d:94:84:
08:b6:f5:80:37:a7:22:eb:f0:c5:4a:13:b1:10:43:
be:45:07:31:66:40:04:c5:4d:49:43:b6:c3:b9:51:
59:e7:d9:59:f2:a6:67:11:c6:f3:65:15:36:e9:fe:
76:5b:c7:a8:35:c3:75:37:37:63:14:13:b6:5e:c1:
0e:b9:b0:5e:00:36:97:f1:d6:11:cb:3d:57:b1:97:
91:8e:8c:07:4b:3e:e1:ed:ee:43:38:a9:1d:00:fe:
8a:4f:89:52:f0:41:38:aa:2f:71:4e:30:7a:ec:12:
34:56:30:01:35:20:6f:ad:e3:be:2b:d0:73:e2:f2:
09:1b:8f:72:f6:4d:dd:1f:56:9b:10:c5:f6:dc:a4:
ce:e3:31:45:ff:49:ac:ed:20:d1:a8:90:44:56:68:
d7:7f:03:5e:ed:93:f1:09:40:a3:79:7a:5f:cc:a3:
a0:9c:0d:c0:e7:25:d3:1d:ba:0d:8e:7a:8f:69:3f:
cf:fa:96:0f:c7:6c:02:df:a7:7c:a3:a6:c4:57:24:
5a:00:f2:27:32:cf:55:79:de:6f:45:be:2e:21:a4:
da:c8:88:69:6a:40:c8:f0:f2:dc:ad:27:0e:9f:c5:
8e:58:e0:cc:ce:77:2e:7c:15:83:06:e3:8d:7d:43:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FD:FF:93:D7:87:25:62:57:82:17:70:5A:E0:9A:DE:EA:D6:40:BF
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c2:85:72:cf:cd:dc:ef:b2:b1:68:fb:df:50:82:26:a6:9f:
df:cf:67:b4:1e:19:40:17:82:45:9b:69:a8:7f:0d:d4:62:ca:
cd:4c:b8:0a:c8:e2:1d:10:6b:06:7d:2c:6f:09:f7:e4:a9:2d:
08:a4:1b:e8:f7:2f:c4:4c:af:6c:88:c4:a4:73:22:47:56:a2:
b9:2f:64:7e:4f:76:98:dd:95:d3:20:37:99:53:bd:38:19:1f:
bb:49:2c:70:bf:a8:04:a9:28:4c:d0:c0:1b:d1:13:97:0a:cd:
e8:c9:13:df:b9:cc:c3:e9:bd:2a:f9:dd:a8:6d:94:67:2c:ac:
e1:fb:3a:62:52:e2:fa:93:d4:91:e8:0a:a5:50:ae:dd:6d:1b:
4a:11:88:46:8b:bc:6b:c0:9e:b4:0b:d3:34:b6:ee:ff:c7:e8:
16:db:69:4f:a7:5f:2b:85:c4:b3:b7:97:a0:ac:5c:7e:0b:ab:
ab:66:cd:44:4d:10:6e:cb:aa:c1:cf:b4:2f:8a:09:67:fd:bc:
d1:d7:83:9f:bf:d0:94:fd:c5:2d:54:29:5b:80:48:46:f9:31:
bb:f2:9f:c0:94:39:ff:79:b3:43:a8:0e:c0:10:86:0a:53:a5:
64:f5:8e:b3:8b:14:2b:ce:b3:37:a9:a7:36:fe:0f:7e:b1:24:
20:17:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:17 2025 by rpki-client