Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 6PAHnDJGYuN3kvU9YPkwyxA72eDriNuN7yNDkh/Wjlk=
Subject key identifier: 60:14:17:4A:E2:4E:37:A1:C6:1D:2A:AA:A7:00:51:BD:66:F9:49:4C
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0198D66139559C99398905ABF8CBD4AA5FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 041F
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: a004BDFe+U4GeY68vJknYa/kVLxcui/MzfbP+ZKZ1DA=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:39:55:9c:99:39:89:05:ab:f8:cb:d4:aa:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=6014174ae24e37a1c61d2aaaa70051bd66f9494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:4e:50:9b:10:3b:7c:cf:d3:d5:00:db:49:
04:14:9b:5e:bd:64:8a:f7:ca:d9:f5:f0:b8:a5:8a:
4a:88:52:42:6d:3e:fd:11:44:73:96:20:ae:0f:06:
da:4a:dc:74:76:41:74:ab:0e:33:b2:c2:b3:8c:1f:
bd:4c:61:c2:ec:1c:4a:24:f0:01:e6:93:8c:4f:a7:
fd:a8:3f:ee:01:34:af:2d:a2:d9:86:42:ce:a7:f1:
e6:f2:a0:0a:8e:69:38:36:a5:f2:73:b5:fe:b3:11:
45:96:79:27:21:01:fc:c5:45:89:b1:e0:0f:27:b1:
15:91:cb:eb:aa:e7:de:64:5c:d2:72:35:8d:7b:4b:
f5:74:cc:d8:ae:75:3c:9e:4b:ea:3e:24:b2:26:66:
01:5f:5e:e7:96:3c:57:ca:dc:f9:6f:c0:08:35:62:
25:f5:ba:21:77:f9:7b:44:44:b0:bc:60:54:2b:d8:
e0:c5:9e:ff:08:f0:83:f1:3a:2b:1d:da:81:0a:7e:
56:34:3b:36:ac:3a:e1:cf:c8:15:40:0a:52:eb:ce:
d4:58:83:a1:b7:bb:d0:ba:4f:43:a7:b6:d9:7e:df:
06:78:e7:55:c2:30:ca:1e:ca:7a:b2:57:5f:79:b9:
d5:6c:9a:e4:0c:aa:fc:83:e1:ef:f1:99:8c:11:88:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:17:4A:E2:4E:37:A1:C6:1D:2A:AA:A7:00:51:BD:66:F9:49:4C
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:6d:1f:d7:de:6e:78:5e:97:ab:c5:f9:42:60:da:e0:b8:
b2:19:0a:64:92:06:a7:1a:66:ae:59:46:dd:53:c9:5d:dd:36:
69:9a:aa:59:c9:ea:84:61:5c:b5:94:7d:3e:c2:ef:72:2b:d3:
02:c3:02:8e:3c:68:0d:93:d8:8f:98:17:a4:a5:ff:73:51:9b:
53:5d:aa:61:32:c3:d5:0d:aa:64:9b:70:9e:11:4a:9c:30:4a:
2e:ee:b9:c7:b5:37:15:fb:fb:a3:69:90:eb:f1:bd:8e:4d:18:
82:58:3d:67:80:0f:4c:fe:d9:2e:c0:cd:95:36:f4:19:15:4c:
ea:d2:5a:1c:68:a7:96:6c:c0:56:8b:0d:98:7c:79:01:3b:96:
19:30:4e:cf:c5:24:10:61:43:db:4a:4a:bd:27:cf:2b:28:a5:
ce:4f:09:eb:8e:66:3b:f1:4e:cd:ed:c1:05:7d:f4:a5:23:d3:
f0:cc:a9:2c:15:f7:5c:b9:d5:bb:0d:4f:f4:bc:f5:9c:54:81:
2a:82:5a:3e:c6:df:6f:1c:84:f0:f0:7f:1f:61:a9:8b:dc:47:
3e:d6:0a:dd:ca:15:e1:d2:b0:30:d2:bb:e8:01:a5:ff:21:13:
f8:61:3f:7c:55:f0:2c:a4:c6:35:76:6d:e8:31:e8:ca:62:0b:
28:c4:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:48 2025 by rpki-client