
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: 8fuj8jsOGWugMBvqfmcALdy/8cilqWlrh9fv/ky166g=
Subject key identifier: 93:EC:C8:5B:2F:C7:6D:59:FC:04:6E:15:5A:AE:BA:21:8B:7A:86:8A
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 019874F53AACFCE4587EC7EAF57546DD3ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 12:01:25 +0000
Manifest this update: Mon 04 Aug 2025 12:01:25 +0000
Manifest next update: Tue 05 Aug 2025 12:01:25 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: qZVFIN54PbLzEpom3TH5CG6++KLibSxsxtV2htyteQI=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:3a:ac:fc:e4:58:7e:c7:ea:f5:75:46:dd:3a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Aug 4 12:01:25 2025 GMT
Not After : Aug 5 12:01:25 2025 GMT
Subject: CN=93ecc85b2fc76d59fc046e155aaeba218b7a868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:99:5b:ac:e1:d6:7c:2f:cc:df:cd:9d:18:
7d:f3:62:57:a6:81:25:75:38:03:53:ef:a8:96:32:
97:dd:69:ae:6b:9d:9e:b2:6a:33:da:27:d1:9f:e3:
11:a4:63:d8:84:cc:6e:11:ab:5c:8d:f5:8a:3d:62:
36:ba:a0:b5:ea:48:83:66:c4:2b:6a:a7:7c:4f:4d:
1b:f2:3a:d7:ac:ac:ef:66:1a:dd:d2:c9:b6:d5:22:
37:e8:86:a4:e8:39:c2:c7:6e:c7:6f:5a:a5:5b:48:
c7:ff:27:5a:21:0a:b7:31:26:53:a2:67:3c:25:4d:
97:b0:de:bd:ea:b1:ff:6c:86:5b:48:c8:44:1d:72:
52:de:a3:f7:80:f0:bb:b9:bf:ca:7f:8b:ec:4e:5d:
52:a1:b0:15:34:8d:a7:fb:01:f8:04:0c:c9:b2:d1:
18:c5:d7:09:6f:ab:e6:9b:21:e0:c8:d4:92:fe:97:
91:e7:35:24:85:ae:fe:90:01:6b:2a:92:1e:a5:97:
24:bd:64:e8:6a:d3:b3:d1:81:28:4c:ee:ce:20:c1:
e0:50:dd:b5:b7:ff:0d:3e:16:63:9f:57:44:4d:f5:
0a:56:d8:d5:b8:18:7c:1a:54:4e:26:08:6a:0f:4b:
ce:c7:a6:84:09:82:af:c6:21:e6:c4:43:e2:5d:ab:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:C8:5B:2F:C7:6D:59:FC:04:6E:15:5A:AE:BA:21:8B:7A:86:8A
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1f:79:13:e7:9e:59:01:24:c4:e1:2b:48:8f:c0:2b:ae:a9:
fc:4c:72:ac:08:eb:0d:b5:e0:d8:6c:d2:e4:f8:c5:d5:58:5d:
04:83:59:45:ce:ad:6a:4d:54:e5:82:4c:29:2e:ce:41:2f:c6:
63:13:4d:f9:f8:7a:e5:ad:03:95:10:62:c8:e9:04:d8:74:59:
ca:af:a3:89:d2:88:e9:2b:73:2f:3a:4a:9e:82:d7:37:3e:5a:
68:ff:05:e0:95:c1:7f:99:0b:9e:2d:54:0b:71:03:95:4a:d5:
46:7d:e5:e1:5c:fa:9a:56:c4:17:2e:ba:c2:20:a5:7e:39:c5:
ec:0b:81:fd:2b:cb:d2:9c:d1:65:f8:57:39:10:49:7b:3a:d3:
c7:44:1c:79:be:fd:a5:ab:c1:05:92:69:3b:c1:91:af:c6:8a:
87:b7:cb:9a:be:42:f8:83:e2:d1:72:f7:de:16:7e:a4:c3:6f:
a6:48:ee:d7:32:e6:7e:47:00:33:8d:db:65:c9:ce:45:ec:32:
49:38:8d:40:54:1c:51:94:0b:74:48:b6:e1:87:85:95:db:a9:
4a:ca:55:f0:d2:cd:97:9d:d4:4f:9a:98:a4:5e:ef:45:a3:54:
91:d6:49:cc:44:0b:95:52:ff:48:db:af:2e:b8:a9:0d:8a:f6:
c8:bc:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:20 2025 by rpki-client