Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: CQLn3ODVo6/JcGBMV+CVEY097vQ5PQdtgAPqFltkBIw=
Subject key identifier: 2C:91:BC:08:AA:45:F1:99:F9:92:CF:CB:2B:71:A7:3F:69:FC:06:13
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0197B7B317B787F68F8ECF12996055CF26FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 09CD
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: iHYbJIKUVhAAU0xv2bE0o3GSpQCSSZkpO6bHn/HUY8g=)
3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:17:b7:87:f6:8f:8e:cf:12:99:60:55:cf:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=2c91bc08aa45f199f992cfcb2b71a73f69fc0613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:61:c3:a0:b9:6d:cf:c2:82:fc:e7:85:2d:
bc:83:69:ac:8e:e2:42:4a:8c:c5:d9:79:5a:ea:f9:
9c:94:83:ea:c5:b0:a5:34:f6:48:96:88:84:af:6d:
3f:45:f3:23:9b:67:f4:e9:a1:89:fa:82:b1:f2:ae:
30:8b:0d:9b:e8:3d:36:b5:b4:ad:e8:93:e6:78:8a:
08:73:fe:1d:f0:a6:26:e3:15:f8:f6:96:12:b3:c9:
a6:d3:2c:66:46:45:bb:04:f2:37:5b:04:04:9a:a3:
ce:ee:7d:0f:a4:b7:70:27:64:f6:1f:42:4e:97:26:
50:ba:7e:f1:a0:70:84:c1:00:08:5a:8c:02:36:bd:
57:69:56:36:1c:db:13:2b:9c:30:f6:43:07:90:df:
67:a0:bf:c2:61:ac:bc:b5:46:72:39:28:9f:95:76:
5a:72:53:b3:9e:41:c0:42:e8:b0:8a:dc:e1:d8:91:
e8:be:06:69:1f:ce:39:3c:56:f8:49:f4:b7:8a:81:
ca:b2:c0:2c:54:f0:55:05:d8:21:dd:dd:eb:6d:9c:
33:d8:e5:92:c9:71:0d:6c:81:80:82:b1:9b:41:45:
93:51:28:63:9e:85:ef:2c:b7:2e:30:09:01:6e:ea:
84:75:fc:f0:cd:28:38:41:ae:62:34:f5:b9:bd:11:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:BC:08:AA:45:F1:99:F9:92:CF:CB:2B:71:A7:3F:69:FC:06:13
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:69:e1:cf:86:80:dc:0e:11:56:c7:a0:eb:cd:14:8e:c7:
16:77:71:4e:f7:a9:ce:e5:e7:6a:34:ef:18:cc:29:57:74:9d:
1c:6f:6d:3f:4b:d7:32:b6:9c:c4:11:7e:21:9a:b7:ad:2a:2f:
70:7e:df:2e:b4:a8:ff:5b:90:45:01:3b:ea:47:9a:34:8a:3f:
41:fb:41:3c:0a:ec:86:6b:7c:5e:36:13:47:ba:6c:d6:d9:9d:
6d:98:dd:93:7e:91:1d:99:d8:76:53:65:7f:68:82:27:11:2d:
d0:63:d3:b0:3c:3e:1b:ea:54:c8:10:3f:1a:bc:3e:74:a0:9a:
96:79:ed:f8:0f:06:c5:8a:50:3b:14:cd:d0:4c:8a:54:76:5a:
c3:ba:61:40:1f:fd:8f:fe:dc:50:01:70:b4:1a:2a:88:9f:55:
05:8f:22:3e:15:a8:26:f6:9f:e9:9b:a4:cc:7a:72:4b:63:cb:
57:bb:0d:09:db:b0:c8:b5:9d:09:22:69:ee:89:3b:8f:f0:69:
4d:fa:3a:40:92:02:a0:98:a8:eb:67:13:8c:c7:31:63:80:b4:
4f:e0:ac:0e:8c:29:0b:03:af:7c:a3:e1:de:b1:ff:b5:70:13:
5a:2d:62:e8:17:79:c7:79:65:a9:8a:1b:18:b2:5c:ea:d2:32:
38:a5:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:13 2025 by rpki-client