Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: 2dZUMVeAUwbMBWr0nEiu3lh6zdB7nTXYFXtYtdSae/k=
Subject key identifier: 3A:3A:CC:B9:BB:09:FA:91:8C:19:3A:B6:D9:C4:C1:E7:F7:EC:26:94
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0198D7E1286870AEAD51D74BD489B29DF389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 14D5
Signing time: Sat 23 Aug 2025 17:01:54 +0000
Manifest this update: Sat 23 Aug 2025 17:01:54 +0000
Manifest next update: Sun 24 Aug 2025 17:01:54 +0000
Files and hashes: 1: 7fMcRpn_4NUKYhcILzNUoH1_qFA.roa (hash: ynbImDmPPvdsLOmMwreWm0bsw2CgIBop1J57NfAEBV8=)
2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: ifhcedjJjfUsWTfnXEHppvvmtZTVBF0cgbp/fBNXPCo=)
3: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=)
4: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:28:68:70:ae:ad:51:d7:4b:d4:89:b2:9d:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Aug 23 17:01:54 2025 GMT
Not After : Aug 24 17:01:54 2025 GMT
Subject: CN=3a3accb9bb09fa918c193ab6d9c4c1e7f7ec2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:f4:32:e4:f7:46:d6:36:87:cb:f2:29:8e:
9f:ac:cc:75:28:e0:c3:78:14:72:fe:2c:80:30:e7:
c3:e5:db:cd:71:97:4d:e1:45:74:03:10:24:ea:97:
9a:9c:12:ad:0a:bb:6f:e8:be:df:f4:0c:5c:96:de:
9f:19:b5:b1:ed:96:20:58:d5:65:04:28:10:98:8e:
ce:e9:5f:31:56:28:53:08:7e:aa:1b:a4:d0:ff:4b:
5e:ca:94:20:4a:67:e5:51:c9:9d:8b:fb:b7:96:df:
bf:8e:24:5a:fc:f4:0b:1b:d9:37:15:da:81:b9:b6:
5e:8d:5d:15:8e:36:c9:d9:81:18:ca:c5:8f:32:f1:
03:32:00:65:83:3c:58:c5:f5:13:62:64:d6:a1:cf:
ff:c1:5a:b4:b3:95:24:d9:31:ce:a4:76:ba:86:d2:
6f:fa:d4:d2:de:60:84:4d:fc:ff:1a:db:a8:92:7b:
92:dc:0f:5a:f0:ec:8d:e3:de:a4:90:24:22:8d:a0:
5e:06:0a:f1:bd:b7:0f:85:28:c6:69:59:7a:b9:d8:
e7:4f:f6:d5:3b:e2:9c:13:b9:21:80:9d:d8:b9:8d:
66:04:63:5a:f0:2f:8e:f0:52:a3:a0:32:3b:e9:32:
b6:03:60:a6:b4:38:9b:aa:e8:45:30:8e:46:94:1b:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:CC:B9:BB:09:FA:91:8C:19:3A:B6:D9:C4:C1:E7:F7:EC:26:94
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:12:18:6d:12:93:17:72:2b:65:6a:68:35:d9:c7:d8:e0:
0a:12:c7:07:f5:63:94:60:16:b9:35:9b:ba:88:17:9f:aa:b9:
5b:13:88:d6:dc:db:69:c3:cf:2f:11:14:39:71:c1:12:e7:22:
03:3d:48:d2:f8:64:02:04:aa:51:e7:85:07:ba:a7:11:71:e9:
b3:04:77:5c:91:4f:41:ac:9b:a4:70:63:36:dc:2b:9d:4f:a0:
3d:5e:b1:7b:f6:b3:5b:dd:d4:f9:8a:a2:b9:a2:70:69:49:20:
c5:e7:5e:17:60:73:89:32:af:dd:0e:db:22:95:50:c3:a7:4c:
8b:43:36:3d:e9:d8:c7:f9:f6:58:1c:61:7a:59:b3:99:a3:81:
f1:95:e9:6f:d3:e6:4f:4e:b3:7c:e7:9e:f4:1f:9e:88:5a:4a:
56:90:94:99:d1:5c:27:e5:a8:ff:0e:fa:c4:4c:c3:58:4d:1b:
7c:10:cd:30:ec:91:5a:d9:75:40:dc:ca:ca:7a:a7:f6:7b:d6:
ba:5a:d9:fe:41:27:f9:87:92:ec:34:c7:09:72:71:ac:60:43:
bb:b4:69:5b:d0:11:ce:29:72:88:4b:fd:53:b6:74:ec:eb:c9:
2e:35:b4:00:1d:3b:7f:bd:3d:99:68:82:51:5d:05:db:00:23:
fe:a5:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:36:26 2025 by rpki-client