Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: UJ8GuEnbh/ABGo2tSwUtUE5dQfCaYTD1tNwx5OAB7lM=
Subject key identifier: AF:B5:95:A8:69:CA:33:8E:8B:53:D1:32:31:41:89:75:11:77:C8:88
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 0198D4734473E37F79A51E6259E1767153EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 0E28
Signing time: Sat 23 Aug 2025 01:03:00 +0000
Manifest this update: Sat 23 Aug 2025 01:03:00 +0000
Manifest next update: Sun 24 Aug 2025 01:03:00 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: f2g28DlLhupy2O4BVJtehQ/hqSDBZ+5h9G1W35PAc1A=)
2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:44:73:e3:7f:79:a5:1e:62:59:e1:76:71:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Aug 23 01:03:00 2025 GMT
Not After : Aug 24 01:03:00 2025 GMT
Subject: CN=afb595a869ca338e8b53d132314189751177c888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:75:6f:ec:dc:25:3b:e2:64:72:7a:13:18:
b3:f1:36:16:69:8a:9b:48:c3:5e:05:a7:7f:fc:b2:
c4:e6:bb:3a:fb:3a:8c:5f:ac:bd:15:a8:92:07:9e:
a8:df:ad:79:b1:98:17:01:09:c0:c4:c5:01:e6:62:
66:a9:74:4a:02:60:e6:69:06:80:81:4c:f5:f2:a7:
a8:1c:25:90:1f:53:aa:2e:52:3d:03:b5:70:f0:8d:
4e:ab:35:ed:4d:4d:b4:26:c9:da:0f:ec:55:64:f9:
3c:fe:ff:f9:65:f4:5e:dd:8f:22:1e:29:78:97:f0:
64:48:d5:fd:b0:ae:95:44:f1:f3:75:67:be:dc:83:
38:91:6f:19:ed:5a:dd:1d:29:1a:f1:61:78:99:f3:
f2:87:93:7a:8f:3d:98:6d:59:32:9b:10:2b:5b:7b:
26:3a:63:5e:df:c0:72:11:e5:63:78:c2:72:34:4c:
8f:38:28:54:67:e9:05:a6:c9:d9:dd:b5:cf:86:0a:
20:79:27:a4:5f:49:14:2b:34:a7:79:bb:cd:5d:79:
6f:8a:ef:a3:ae:87:f6:34:36:fd:80:2e:df:c4:e5:
d2:38:07:ba:0d:d9:60:31:0e:98:99:f5:1e:a0:be:
b3:dd:44:7b:c4:c0:7d:22:8d:d2:42:33:8c:d2:ce:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:95:A8:69:CA:33:8E:8B:53:D1:32:31:41:89:75:11:77:C8:88
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:e6:32:7f:ae:05:87:c3:f5:69:0d:44:21:58:52:b4:a0:
4b:a2:3d:ac:9e:55:25:f1:89:2c:1c:cb:90:16:6a:f9:ab:c7:
5a:54:ee:2a:da:6a:e2:3b:3c:b4:f9:19:de:2c:3e:4f:99:79:
9a:6f:30:0a:8b:68:7f:46:45:2e:d8:d5:07:e7:b8:27:92:5a:
de:c1:4b:a9:05:1b:f4:e2:33:93:67:47:78:42:cb:03:ad:b2:
c6:bc:af:07:86:d7:bc:1e:7f:03:0a:e0:f2:be:07:b1:7b:3f:
6c:7c:56:6f:6f:94:f9:76:ab:64:a0:61:10:e8:b4:59:19:5b:
6c:5e:11:db:01:cc:0b:3d:3d:7e:e0:66:22:13:35:20:26:05:
02:9a:b2:20:16:c8:ac:9f:77:68:90:ee:53:8b:42:56:5c:f9:
88:1a:1b:c4:7e:6c:6d:6f:5f:1c:df:07:6f:b4:b2:29:08:3a:
af:03:bb:c2:a3:e6:81:82:f8:78:1e:62:04:48:dc:7b:08:17:
20:a7:72:5e:d1:09:de:a4:2a:ef:6b:3a:a3:37:0c:b1:b7:92:
b8:7a:98:33:28:42:df:a1:84:d0:f6:e0:01:a2:4e:04:88:37:
ec:b9:15:08:42:70:8f:ff:d9:7d:c7:59:9b:f6:d3:77:7d:00:
94:4b:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:35 2025 by rpki-client