Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: PNVDvhxW97PQ84LeT71LK3MEplR4Hp4OqfD0TRhTE9A=
Subject key identifier: 10:48:C4:68:42:C9:3F:A7:AD:65:18:04:4B:37:64:35:85:A4:36:03
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0198D583DB36A50987D5283B535329DFCDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0BEB
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: cVz4wT42QYqGEDgZh+VP49+wCHjTIIL+aHpOs6ZeK/0=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:db:36:a5:09:87:d5:28:3b:53:53:29:df:cd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=1048c46842c93fa7ad6518044b37643585a43603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:3c:34:5a:5e:20:90:97:82:b3:a5:78:d2:
bf:65:46:40:45:bf:fc:52:79:ce:1e:c5:23:f3:8f:
25:7c:27:d3:1f:ce:d7:3a:0e:20:19:4a:76:90:07:
3c:fe:ff:52:fa:13:fc:c1:16:73:45:c2:7e:a6:6a:
fa:28:5f:e7:18:65:9a:e8:80:fa:d8:80:ea:0b:82:
ad:a1:2e:ad:da:4b:1d:58:16:97:db:58:f0:1d:26:
7c:f9:ba:4d:fc:6b:11:50:e7:d2:27:2a:67:00:06:
f6:d4:8c:76:ec:e1:bb:e8:29:0b:44:65:7c:4c:bd:
87:d8:25:d3:0d:6b:6d:e0:4e:25:f3:a4:7a:85:bc:
b0:cc:f2:6a:6c:4f:3a:fe:74:90:a4:56:a6:40:de:
ce:bd:e9:80:18:0c:29:14:fd:b5:fe:43:25:72:fc:
54:a0:86:32:90:5b:91:16:2c:af:76:3f:c8:76:59:
44:e4:12:d5:2c:cd:29:4d:69:5d:e9:e1:95:e7:94:
a0:9c:d7:22:7b:55:94:9c:92:3a:11:98:b9:22:81:
fe:ba:88:bd:6c:fe:88:2e:d0:47:ae:d4:65:9d:29:
15:8d:95:f2:23:0d:d7:70:64:f0:5d:dd:ab:4f:10:
de:1c:25:51:0a:9c:cc:ad:a7:02:9f:e3:69:86:f6:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:C4:68:42:C9:3F:A7:AD:65:18:04:4B:37:64:35:85:A4:36:03
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:16:6c:af:99:e8:87:2d:e4:c8:a7:cd:f9:ce:df:2f:50:83:
fa:c7:37:09:13:14:0b:78:c6:39:f9:ec:94:4c:61:19:31:a5:
33:8b:f3:43:80:cf:aa:45:e2:99:23:78:01:d5:0c:3f:71:96:
1c:58:09:89:85:f7:7b:a9:35:ca:8c:77:b1:cb:d3:44:5f:a6:
6e:ce:c2:e3:e4:da:4e:9c:ea:5d:48:2f:91:f7:cf:23:c5:4f:
97:58:a4:0a:d1:5d:c7:4b:f2:9e:1f:ed:f5:c3:13:b4:17:33:
bb:ff:b4:f0:c4:6c:bb:6b:ab:5d:9a:a3:74:9b:d9:c9:58:8e:
b0:4c:44:2c:b3:e4:bf:59:e4:8c:a9:61:b4:22:ed:c8:3a:5e:
7b:cf:7d:b8:1c:c4:22:cd:01:a5:19:ee:cc:4a:58:7b:85:03:
cb:a5:6e:b4:df:5c:3c:67:a0:51:2d:94:dd:b3:b2:fe:2f:d5:
cb:1f:4f:03:bd:af:a1:3e:a3:cd:5b:04:39:8f:e1:3f:77:4a:
95:bf:9e:77:d6:38:29:4d:7c:cc:3b:93:72:22:d8:0b:ed:af:
03:f1:2e:64:c0:aa:fe:89:32:ef:aa:b3:07:7e:53:36:f2:05:
f3:51:63:b0:76:76:95:5a:d4:8c:b4:49:b2:fc:b8:5c:36:28:
2c:b7:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:50 2025 by rpki-client