Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: YexmeiWcJpPgQGn5hfYSMhyEU5YqjRAxtyzZBoSrjRs=
Subject key identifier: CF:93:B9:B7:3D:37:8E:93:56:2B:5A:8C:D8:55:61:CF:14:CE:58:E5
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 01987B2DF8DE826368186819F3F5813EDF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0D01
Signing time: Tue 05 Aug 2025 17:01:07 +0000
Manifest this update: Tue 05 Aug 2025 17:01:07 +0000
Manifest next update: Wed 06 Aug 2025 17:01:07 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: i8fvENBj0ueJc/yLOK1xfjzhg52/BTfiAJFZUpsXINc=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:f8:de:82:63:68:18:68:19:f3:f5:81:3e:df:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Aug 5 17:01:07 2025 GMT
Not After : Aug 6 17:01:07 2025 GMT
Subject: CN=cf93b9b73d378e93562b5a8cd85561cf14ce58e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:24:6a:fd:18:98:47:60:c8:2e:c7:05:60:
13:89:7c:75:0a:7d:44:c5:8c:13:f3:67:5b:3f:3d:
f7:b5:80:cb:46:6e:f1:b9:49:4b:e9:fe:2c:62:8f:
51:41:0e:8f:f1:2f:ec:b8:21:86:f1:be:97:0a:fa:
41:33:a0:9f:b3:49:8c:89:50:7f:d4:bc:9b:5f:bc:
07:c8:69:6c:ad:15:63:da:7f:93:bb:cc:8d:f7:66:
3d:78:39:d0:81:5f:6a:01:96:68:e2:70:f3:6e:b7:
f3:0a:eb:93:9b:ad:23:3e:94:b1:03:7b:38:61:5d:
19:af:b8:a4:74:12:06:44:64:84:c9:2a:3b:01:c8:
27:50:11:3b:a3:dd:f6:37:ae:dd:be:f0:ce:68:e7:
d7:a0:ce:16:c6:5b:14:42:34:3a:31:b8:ee:a1:a2:
83:1f:fc:5f:7e:bc:ff:51:f4:89:76:d3:0f:f2:08:
d3:8f:ca:7a:0c:fa:e6:d9:dc:30:53:a2:9c:88:d5:
54:64:5a:de:6f:5e:ee:1c:e5:84:20:90:66:b7:b2:
6a:cb:f9:f8:7e:0d:9d:3c:8c:1d:f2:1e:ae:ef:47:
80:85:2e:23:e8:73:76:74:d6:c5:ba:34:a4:da:82:
4a:64:c9:a9:19:83:3b:f2:ee:11:71:f2:a2:bd:a0:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:93:B9:B7:3D:37:8E:93:56:2B:5A:8C:D8:55:61:CF:14:CE:58:E5
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:59:6e:21:47:75:4d:2e:3a:f2:c4:4e:85:fc:41:ef:65:
32:ec:37:b0:c8:92:2b:da:63:c4:5d:50:87:70:ae:17:2f:20:
a2:c2:0b:c5:94:96:7f:06:18:e0:39:5d:c7:18:79:a5:6a:a5:
7a:3a:e4:16:a0:8a:7a:19:19:ab:fd:72:66:f0:4d:43:12:32:
a6:dc:d7:8b:bf:48:de:b8:a3:a3:cc:ce:3a:95:f1:aa:3c:d7:
67:e9:e0:3d:50:86:f2:30:bf:09:29:2a:08:f7:9d:77:cf:b4:
0e:00:ca:11:ca:2a:89:75:63:7a:27:d1:ec:ac:cd:57:6c:5c:
be:fb:bf:fa:57:16:94:19:c0:78:d8:14:2f:01:09:b0:84:81:
44:42:65:50:d0:e1:aa:2d:d5:99:77:aa:ef:6e:3b:df:0e:15:
e9:e2:cc:8c:fb:9a:3b:97:53:f1:95:24:63:9a:54:81:0f:91:
3c:59:53:ea:26:67:63:eb:82:9b:45:b1:c5:00:56:e0:e4:b2:
ca:ec:cd:af:a7:00:c0:f8:0e:7c:e2:ed:12:74:ac:7f:86:a3:
5a:a3:32:bc:bf:33:00:ab:cb:4e:e1:51:8a:59:b6:d2:6b:2c:
c4:c3:6f:38:e3:10:4e:74:eb:65:bd:dc:45:c3:13:a7:4b:11:
9b:7d:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:57:01 2025 by rpki-client