Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: fcgPdDOxxlhRgrqKXCNOiRExaLxb/n3E0LpuQ8v8h+Q=
Subject key identifier: 5E:26:94:0D:30:B1:89:74:46:8F:C8:7A:A4:20:CF:30:FF:64:1C:74
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 0198D660B3DF0BF4B7C2CE8FB061FEABD114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 053E
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: 22caDD/X8PBLNNGcAI2TMHuzaiE/wccy+z1pxrspSzU=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b3:df:0b:f4:b7:c2:ce:8f:b0:61:fe:ab:d1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=5e26940d30b18974468fc87aa420cf30ff641c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:cb:8a:13:85:85:28:50:c2:85:80:e8:cf:
ac:0f:1b:2b:13:e3:b7:20:1c:67:8f:9f:d5:d7:1f:
f2:4d:3d:60:09:be:48:6f:00:57:28:56:72:6b:b5:
24:cf:e4:f4:81:f9:c2:45:13:4f:40:b9:09:dd:e2:
e9:c2:a6:32:d8:de:fa:b5:e1:15:68:8e:99:b2:fa:
87:13:c0:3b:45:8e:7f:29:81:84:59:cf:ca:f3:df:
c7:99:5e:ec:d9:a9:09:45:63:c1:4e:45:2c:cb:4f:
b9:d2:24:2f:65:be:63:c3:b7:08:e9:da:95:8a:8d:
74:90:9f:a6:a5:fa:1b:e0:b3:41:c3:95:83:35:6b:
35:2a:6d:fe:22:fd:fc:a3:c5:7e:6c:8c:fc:ab:99:
0d:89:83:9b:06:b2:bc:d7:ca:c3:41:ed:de:c1:af:
60:ab:da:36:6f:a6:30:5e:4a:68:e1:0f:a5:f7:ba:
89:da:3f:d0:45:44:a7:be:8a:15:8d:10:6e:1e:ce:
87:61:a1:8e:f3:1f:6d:b0:97:1d:18:74:81:d1:2f:
b5:eb:f8:7a:46:81:37:0e:a6:0b:e9:3f:64:e3:7d:
90:5f:ed:60:13:e4:d2:05:7c:7a:6b:46:1e:f8:61:
b0:d1:c9:4c:82:cf:e1:d5:34:c0:14:2d:80:88:37:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:26:94:0D:30:B1:89:74:46:8F:C8:7A:A4:20:CF:30:FF:64:1C:74
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:7e:76:8f:02:f7:f9:04:6f:53:fa:d7:6a:fd:22:35:c6:
8c:77:b0:64:f3:d8:77:52:cd:aa:5d:e9:e3:9f:54:28:f7:b7:
42:d5:24:a2:8b:94:27:f6:ed:85:e4:a6:63:d3:60:2c:90:b5:
48:e5:9b:11:c0:10:ed:b2:d7:fa:af:da:c1:5c:63:e5:f1:22:
58:29:33:47:45:70:26:4b:5e:8b:86:1a:5a:28:d4:7a:51:f7:
81:e4:2d:5a:26:1f:e7:69:9a:9c:cc:c0:58:34:f3:24:34:8f:
47:5a:96:39:e5:1a:b0:ae:8b:47:71:fc:ca:6d:f4:38:71:9c:
27:58:0e:4b:bf:b4:f1:e1:00:79:dd:01:58:7e:9c:e4:bf:80:
ea:72:9b:f8:e5:a6:f3:fe:b8:65:77:55:62:6b:81:75:36:2d:
d7:77:99:c4:08:89:21:08:f3:97:9e:f4:c4:a6:c4:10:8f:a0:
ba:90:69:f2:72:75:48:57:b8:28:e8:20:b9:eb:04:72:a4:db:
7c:22:25:bc:e7:f6:6b:88:7f:86:4b:48:2e:f2:a9:d5:07:a1:
ee:c4:49:8b:44:9e:83:ed:0c:65:97:a1:4e:01:45:00:ae:61:
8e:ca:46:26:64:5f:1a:8a:44:da:05:11:bc:ea:bc:e1:9b:e3:
0f:e3:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:13 2025 by rpki-client