Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: UE5jgHzVYzZ2MDyG9JeqkstC1I1AkI+BKXFeKbostLM=
Subject key identifier: 11:3F:F5:E7:03:47:07:BA:80:6D:17:D8:33:B7:13:5C:A5:8B:E3:F5
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0198D8844F4A0DAFE2DAD753512C3121164C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0AA1
Signing time: Sat 23 Aug 2025 20:00:06 +0000
Manifest this update: Sat 23 Aug 2025 20:00:06 +0000
Manifest next update: Sun 24 Aug 2025 20:00:06 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: su+hYv6Zu/KNu2ubzEmy9R5cgyG5loDq5OxxEwIQZhs=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:4f:4a:0d:af:e2:da:d7:53:51:2c:31:21:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Aug 23 20:00:06 2025 GMT
Not After : Aug 24 20:00:06 2025 GMT
Subject: CN=113ff5e7034707ba806d17d833b7135ca58be3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:c5:cd:23:f0:b2:3f:95:c0:95:39:69:2b:
0b:3b:26:84:3e:41:2a:08:2d:20:2c:6c:73:d3:f4:
7f:21:2f:eb:7c:4b:0b:55:72:39:1e:7e:a0:30:12:
da:85:16:9b:96:6d:06:3f:01:3c:3f:e6:e2:3d:7e:
0e:8d:9b:88:d6:6e:02:53:5c:f2:ef:a4:a7:cf:a4:
1e:87:03:41:1f:f5:ca:d7:96:46:da:97:96:e1:df:
91:5c:bb:d3:59:12:ff:eb:f2:ea:dc:cf:1b:c3:d9:
f9:b4:dc:95:be:e2:d1:48:6d:03:d2:b8:66:fb:9c:
d9:53:31:67:d2:38:5a:8c:cb:db:40:18:97:02:7c:
58:f9:1b:3d:f0:d0:7a:0b:34:c1:13:bb:e3:0e:e4:
bc:7e:1b:ae:dc:66:67:e7:8a:65:09:ba:04:f1:3f:
e9:69:2c:eb:dc:ab:b9:1d:26:4f:9c:77:78:6f:ec:
0c:7b:38:78:6a:9a:a0:1c:06:7d:60:78:cc:3f:17:
0a:bf:e6:28:94:76:2f:14:f5:72:02:05:fc:14:90:
92:57:af:63:46:e7:26:3d:81:72:40:af:64:68:31:
8f:14:76:1b:d4:40:fb:02:21:00:47:97:ae:32:d7:
95:c9:63:20:eb:55:97:77:38:e1:5f:da:54:0d:57:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3F:F5:E7:03:47:07:BA:80:6D:17:D8:33:B7:13:5C:A5:8B:E3:F5
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:60:15:8e:0b:7b:03:2e:55:c3:a2:02:6a:d6:fc:0d:f2:
cb:6f:de:ee:e8:fc:a3:00:ac:80:db:f5:dd:ee:31:be:ba:59:
5e:10:d6:e0:87:7b:9c:dc:57:41:53:b1:ad:73:10:59:c3:b5:
16:2c:8f:64:89:5c:38:03:fd:bb:ad:3a:42:04:8e:e1:62:aa:
32:e3:c4:8c:7b:77:f8:b9:8d:7d:3f:f9:73:6a:64:51:ed:89:
05:19:61:5e:34:1f:9c:ce:28:2c:ee:97:62:7f:0f:26:df:8a:
78:fe:6c:9f:7b:48:db:c2:12:e1:7e:6f:4c:1d:2b:02:83:55:
2d:2c:6a:19:9c:3d:30:ad:09:84:00:bb:18:96:f0:be:0d:06:
8d:c6:6a:aa:96:88:3d:e6:5f:3d:bb:38:e4:76:5d:28:29:33:
e7:6f:5c:b8:74:cf:7c:c2:f1:5d:6b:c1:88:fa:99:8b:ba:52:
fd:11:93:c9:96:c1:f4:83:ce:3d:30:9a:02:8a:95:9e:39:4b:
d4:ed:6c:e6:89:2b:95:f3:24:87:93:e3:d0:06:7e:9c:35:ff:
5a:f7:d6:db:1e:52:f7:5d:3b:ab:db:46:20:73:ae:71:33:4c:
a2:2e:72:bb:73:5b:a1:6e:b7:4b:00:dd:39:87:d6:cd:5c:50:
f9:39:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:40 2025 by rpki-client