Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 2LFMm/lry1POQQPEPBm2Ljfgs8Rpjj46LeQ+c3g0HtQ=
Subject key identifier: 46:85:DD:7B:87:1C:24:D0:C3:7C:AC:A9:D7:B8:CC:A5:32:3D:2D:BE
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0198906BBBBB07B226BD692F3BF6B2EA0D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 12C5
Signing time: Sat 09 Aug 2025 20:00:36 +0000
Manifest this update: Sat 09 Aug 2025 20:00:36 +0000
Manifest next update: Sun 10 Aug 2025 20:00:36 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: mL0/biEWy2TCtKmPpziQaL2c7CMxF1UUAb/58atg+Sg=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:bb:bb:07:b2:26:bd:69:2f:3b:f6:b2:ea:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Aug 9 20:00:36 2025 GMT
Not After : Aug 10 20:00:36 2025 GMT
Subject: CN=4685dd7b871c24d0c37caca9d7b8cca5323d2dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:0a:c7:4b:74:9e:c6:13:9e:1d:4c:00:c2:
8b:77:1d:f1:73:2d:2d:91:d9:48:17:84:fe:c2:8b:
1d:a0:6b:01:85:1a:3c:d4:be:8d:cd:08:0f:96:22:
1e:94:8b:92:05:70:42:8d:d5:9f:e7:9d:14:80:6a:
3b:58:ea:cd:3d:82:55:ac:6d:a0:bc:9a:18:b9:3e:
7d:1f:fd:70:de:83:2b:a2:8f:ea:49:58:9d:8d:7c:
e0:6c:2c:64:d6:91:e9:c9:26:e1:53:c2:45:43:07:
dd:b0:a2:5a:f5:3c:f6:b8:de:9f:30:f4:6e:1e:e4:
14:13:c8:9c:e6:f1:d1:10:7e:49:df:71:be:bb:dc:
56:21:44:67:0b:23:29:fb:4a:26:f8:32:c3:42:b3:
cf:b7:3f:70:10:17:cb:ae:32:04:52:c1:e3:39:7b:
7d:97:50:40:f8:cc:89:61:a8:ac:1f:69:c5:93:fa:
2d:e9:5d:71:06:50:db:07:8b:ed:f0:5b:9c:ca:59:
32:a1:b1:f1:00:12:61:2c:ed:38:f9:14:e3:4c:2b:
3f:b6:37:cb:95:0a:d8:04:da:65:1a:3b:59:be:c0:
1a:04:d1:0f:f4:3b:be:6a:dd:6c:b9:5e:65:d9:c4:
24:39:2d:08:b8:6f:14:03:52:cd:6e:ff:98:e1:48:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:85:DD:7B:87:1C:24:D0:C3:7C:AC:A9:D7:B8:CC:A5:32:3D:2D:BE
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:89:e5:6a:17:25:3e:4a:91:b3:30:59:8c:8d:4d:49:53:cf:
21:41:f0:9a:6b:8e:1c:67:29:d1:c8:7d:4e:90:a5:48:04:df:
94:50:14:ff:ff:cf:63:34:b7:e6:98:65:27:dc:ed:7f:51:10:
a7:33:65:11:fc:b2:07:92:96:c7:d4:6f:e6:0d:a0:9f:be:4a:
d3:0a:97:bf:b7:be:bf:c7:dd:c1:c7:42:cf:70:df:0a:aa:a1:
e9:24:84:e9:6d:c3:72:b2:ca:8f:3c:0b:74:9f:0b:e4:16:bc:
29:6a:93:b0:10:5e:d4:c0:78:3b:01:58:fc:23:27:38:63:88:
22:08:25:2e:27:09:8d:ee:c5:43:d5:2e:be:88:86:58:b9:e0:
c0:20:cb:de:f7:93:3f:e3:7e:1e:aa:13:25:df:44:c3:b0:bd:
6f:48:85:7d:a3:4b:ea:fa:99:b3:09:d3:61:c1:5c:a8:3f:b1:
8a:82:b2:f8:fd:7b:9d:6f:12:14:b4:e6:7e:82:ac:ec:1c:92:
90:10:d0:2c:6e:ff:80:f2:e0:6c:5d:4d:75:dd:15:fd:2e:c1:
16:29:1e:22:5b:4f:b4:f3:5e:c5:2e:c1:67:03:2c:4c:80:60:
39:be:29:9d:4e:2a:2e:1e:a4:4d:9c:7e:b3:6c:91:86:90:7f:
46:5b:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:55:11 2025 by rpki-client