Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: 9KOZPG7q806ENprz+8FQZLefa6sMmkBhqXr0Lv/AFXQ=
Subject key identifier: AA:A9:3A:77:32:81:8C:9C:DA:CC:B8:77:10:50:A4:37:3D:2D:68:CB
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 0198A04CF8372B6F378D663A11C4CA9B57C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1507
Signing time: Tue 12 Aug 2025 22:00:55 +0000
Manifest this update: Tue 12 Aug 2025 22:00:55 +0000
Manifest next update: Wed 13 Aug 2025 22:00:55 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: bKBYWFiFl4jqJSKOaOJS2OxtvlzZ3jB0YHG+a6oqylU=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:f8:37:2b:6f:37:8d:66:3a:11:c4:ca:9b:57:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Aug 12 22:00:55 2025 GMT
Not After : Aug 13 22:00:55 2025 GMT
Subject: CN=aaa93a7732818c9cdaccb8771050a4373d2d68cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:38:54:4f:24:f9:5d:36:9b:fe:13:76:aa:
65:c2:7c:11:cd:60:58:98:30:19:12:12:03:fb:45:
c2:7a:f5:11:78:aa:09:65:54:2a:d5:2a:a0:ee:dd:
fc:57:51:96:81:8c:00:6c:a3:91:78:32:69:46:87:
df:0c:6e:54:45:e6:2a:92:f0:ad:2a:bf:82:cd:3f:
c3:4a:ef:1a:05:8e:5a:72:eb:33:3f:05:8f:44:bc:
1f:8c:d2:5e:00:25:7f:24:83:50:c1:01:5d:e7:3f:
c5:b3:12:d2:1d:42:95:f4:a7:80:b9:c8:e0:5e:f7:
b6:d5:51:7a:b2:4a:68:f0:f8:00:63:a2:63:3b:62:
fb:1f:e8:bf:e7:28:c3:f0:4f:9a:16:e2:17:e2:67:
42:07:f9:10:8c:1f:91:5e:0c:ea:19:83:98:f6:15:
56:92:83:63:93:fe:5d:59:1c:cc:1a:35:e5:47:90:
56:99:78:23:7b:a8:2d:b4:c1:4b:ef:95:6c:d6:04:
ea:4c:55:33:a5:d1:86:a1:48:20:49:78:46:f4:7f:
f1:61:b5:30:94:c6:83:b8:b6:a6:59:36:d9:43:e5:
6e:c9:ba:b0:e8:e8:8d:0b:3f:02:48:f5:71:b4:81:
9c:94:35:70:0a:2d:da:b9:d3:8f:98:63:9e:40:20:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:3A:77:32:81:8C:9C:DA:CC:B8:77:10:50:A4:37:3D:2D:68:CB
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:45:5c:a2:3d:d1:2f:6a:aa:24:66:7b:94:52:ac:ca:f9:e5:
84:0b:7c:fd:1f:22:19:d8:f2:3e:89:59:c6:c7:36:e4:72:11:
f8:3e:9b:33:b7:39:37:5f:71:07:4b:76:41:b7:80:86:c6:fc:
1f:ab:21:95:2a:d4:af:17:55:9a:7c:bb:39:bb:22:0c:bc:2f:
75:a6:2a:ff:9e:a6:a1:ab:44:bd:35:82:08:24:d2:69:b1:ee:
5f:57:58:2f:a4:eb:a3:24:5d:c0:42:5f:0a:d2:b9:83:3f:ac:
79:40:77:78:53:2b:4f:01:fa:95:a1:9e:9e:c4:81:d1:3a:13:
b9:9d:1a:77:a0:7d:93:e7:4d:75:fa:33:6f:c0:81:f8:6a:0d:
8f:29:df:c6:ed:dc:e6:d7:a1:92:57:6b:10:7a:5e:1a:44:08:
57:a0:4f:df:1f:4c:bf:75:00:94:c2:98:e8:58:39:4f:5e:06:
7f:fc:e6:0b:01:ec:bd:2e:08:89:1c:1a:7e:00:30:3e:26:d2:
06:e2:45:8a:28:09:8d:2e:c4:c7:c8:92:c7:37:98:4d:f1:e5:
6b:90:87:06:3d:d3:50:f8:85:20:1e:78:ad:b7:4f:ab:9d:b6:
33:bd:ff:df:8c:c7:2a:5d:e8:0e:df:07:fc:a6:8c:c0:ae:be:
1d:fb:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:18 2025 by rpki-client