Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: MPSedRtvxvblNuHBbZi3Se0owKxmy3fG0fjRcAOCTSc=
Subject key identifier: 55:58:5E:FF:39:29:2B:F1:CC:B9:4A:D2:0A:DD:6F:A9:4A:3A:FB:F3
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019873748D963101F9090D53B62D3E43CE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 11BD
Signing time: Mon 04 Aug 2025 05:01:14 +0000
Manifest this update: Mon 04 Aug 2025 05:01:14 +0000
Manifest next update: Tue 05 Aug 2025 05:01:14 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: 9E2Fh4ZypSkdgJIdIREciJj9Zuq9NN4rAkzAiK3dzJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:8d:96:31:01:f9:09:0d:53:b6:2d:3e:43:ce:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Aug 4 05:01:14 2025 GMT
Not After : Aug 5 05:01:14 2025 GMT
Subject: CN=55585eff39292bf1ccb94ad20add6fa94a3afbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:96:92:95:99:74:d0:c0:42:0b:8b:f6:29:
fd:7e:6d:fe:65:ac:c5:2d:c0:34:19:76:72:05:fb:
22:ed:5a:2b:4c:24:93:16:7f:90:99:90:7e:2e:5b:
cd:20:b5:f5:ae:66:dd:4e:a9:41:8d:a1:12:29:b8:
5e:46:7f:84:d6:b5:6e:21:0c:b2:2a:95:ef:65:85:
f3:07:f7:e5:9a:64:e8:21:11:53:8f:28:5b:44:ae:
a6:b3:53:0a:22:63:35:8a:f6:ec:91:ed:7f:4f:df:
b4:e2:96:c5:a7:3c:49:d9:af:63:6e:d3:7d:92:1c:
5f:50:97:b9:70:27:41:de:cf:69:c7:f3:ce:a3:81:
99:16:08:cf:7f:89:20:de:ab:de:96:fb:7c:34:c0:
50:fa:11:cf:92:8d:b5:06:4a:21:8f:46:0b:96:75:
e6:78:12:28:94:b7:48:1e:96:a4:40:6e:09:68:61:
cc:4a:fc:b8:d4:9e:32:1b:01:cb:f4:a6:9a:e2:12:
aa:f4:17:97:b3:83:1a:dc:15:61:31:95:7e:b5:08:
cc:31:81:78:d2:d6:1c:3b:44:6b:85:98:84:fd:a8:
e0:bf:5f:49:2e:6b:18:66:88:64:63:3d:f3:49:d3:
c8:9a:84:51:75:a2:89:22:4f:03:99:79:e1:08:ec:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:5E:FF:39:29:2B:F1:CC:B9:4A:D2:0A:DD:6F:A9:4A:3A:FB:F3
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:d5:28:3c:4d:a3:f4:3a:74:71:9e:d2:ba:1c:76:93:bb:
3f:7f:1a:9e:47:79:9a:02:b5:6e:1e:23:aa:e5:dd:b1:31:a6:
e7:c6:cc:17:db:ff:67:b8:67:36:ec:f7:ce:11:92:f3:17:b1:
50:22:e2:bc:b7:1b:f1:26:c2:b1:81:5c:4d:25:d3:4d:ee:04:
d7:8c:97:8f:31:26:6a:7d:1f:aa:ad:86:c5:ba:13:e4:07:ef:
20:7f:54:34:97:1a:45:e6:11:42:fd:90:b1:d8:d7:2c:c8:d6:
1f:c1:2d:de:5d:c9:00:93:95:37:2a:40:cd:17:8f:e9:a0:67:
3c:90:8a:c0:c0:24:b8:9b:06:30:44:96:de:1b:d7:ca:be:37:
10:ab:e8:07:0c:39:6d:d3:9c:13:b1:87:12:b2:6c:06:d5:78:
5b:eb:c6:ca:1b:9a:f8:da:49:84:5e:73:98:02:e2:56:59:dd:
b0:8c:8d:94:34:a9:ca:9e:17:01:02:b8:93:43:fc:1b:d2:59:
c6:10:3b:8d:84:15:d2:c0:a6:cc:d5:7b:22:ba:7c:8f:a5:4f:
d4:b4:6c:46:90:53:7e:36:7b:c5:ed:28:5e:81:b4:4a:db:91:
af:3f:be:21:08:5a:42:d0:ae:53:28:d1:5b:d4:75:6e:07:11:
29:05:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:11 2025 by rpki-client