
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: SjNOfvE26/QVutZqxvxGlKvUn/znRI2hg5KSSyz5r0o=
Subject key identifier: A5:D3:E0:39:3B:72:CE:DA:CE:56:ED:6A:C6:36:35:92:25:62:84:5B
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 0198D5F16FF60B424ABF6C40101DF6CB712D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 014F
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: J940o7rf82pPrLLm3M4L1nSgoN7moTuUnx6BVb4fjhY=)
2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6f:f6:0b:42:4a:bf:6c:40:10:1d:f6:cb:71:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=a5d3e0393b72cedace56ed6ac63635922562845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:44:08:86:80:79:95:2f:1d:88:91:be:4c:
24:56:78:2c:d2:cb:e2:cb:8f:64:df:da:6c:6c:cf:
a3:69:2c:6a:cc:f5:a1:68:ed:ab:54:2f:51:42:6d:
b6:97:9f:51:2e:4f:06:33:6f:be:0e:b3:b7:6b:66:
f7:e9:77:1b:50:fa:3c:1e:0e:90:80:f5:ee:9c:60:
e3:c6:ea:57:70:19:78:4b:6c:83:83:aa:d0:fa:d5:
54:24:ce:35:82:00:a3:a9:33:b2:e5:0e:7a:5e:3f:
54:66:42:eb:3e:4b:2c:41:3c:97:0f:1e:3f:ff:60:
fa:4c:ad:35:04:a3:5a:4f:96:4a:86:63:aa:03:4a:
a5:44:70:0a:89:1c:d9:7c:10:ac:05:d2:e5:73:8d:
4a:67:68:1f:b5:5e:96:c6:0b:d9:3c:90:c0:e2:50:
78:23:01:ef:5d:a6:2f:fa:9c:09:74:2b:ad:44:69:
21:be:b4:c7:9b:d6:0d:c0:19:e3:97:df:cc:1b:f9:
74:57:f3:aa:c8:55:de:1d:28:aa:4f:4f:12:a7:d5:
51:f0:5f:5e:c5:1e:a2:f9:8f:3e:4b:98:64:c2:cf:
26:8b:02:f6:55:e1:96:1e:47:65:5b:3a:a2:92:1c:
2b:f3:09:48:67:8f:18:e2:ce:61:0a:62:ca:3a:58:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:E0:39:3B:72:CE:DA:CE:56:ED:6A:C6:36:35:92:25:62:84:5B
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:64:6f:36:48:35:03:b8:91:08:81:b5:0b:85:f4:36:27:d0:
5b:f4:b6:06:f0:35:fb:4b:e3:1c:cd:15:8a:f0:13:74:ca:de:
da:d4:77:1c:75:fa:6f:e4:83:78:0c:58:5d:47:f1:af:28:73:
f4:9b:f9:d5:2d:98:61:01:42:81:fb:62:b3:fd:6a:c8:8e:bd:
61:1a:17:ad:11:8f:f9:2a:41:50:62:68:35:38:3a:05:65:22:
49:52:03:85:c4:19:39:cc:88:90:3d:2d:62:e3:b5:16:46:78:
3a:68:f7:3d:70:98:43:44:1f:4b:52:25:91:f2:16:0b:55:a0:
4d:21:d2:ef:ef:ed:d6:e0:ee:82:98:ba:4b:18:48:cd:dd:80:
c6:4b:d8:14:f2:8d:ca:e8:35:5e:78:d9:61:6d:0c:4a:1b:e2:
b7:26:5b:a2:7b:be:16:e1:c1:d2:5e:48:6a:6f:9e:09:6b:1c:
ff:38:75:48:35:33:7f:f1:dc:be:fd:5e:ba:58:40:f2:bd:d3:
af:4f:52:b1:4a:cf:f3:98:3f:db:57:ef:5f:aa:24:a4:ec:0f:
81:cc:7d:5e:d7:73:ca:1c:89:7d:6c:2b:38:78:11:e9:8b:45:
6c:1b:fc:d8:24:bf:19:0e:dc:21:d6:04:e8:8b:e5:33:5a:c3:
b3:80:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:51 2025 by rpki-client