Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: bnVqynPDAkz4CVi0LGrQSgh09llVajLE4g592DeSDGg=
Subject key identifier: A0:EA:FB:86:C5:27:2C:EC:7B:BD:53:0A:F4:86:97:7A:21:2F:0C:07
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 019880C1DA0A30EAE60BAD25FA8AEFA2D966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 13D9
Signing time: Wed 06 Aug 2025 19:00:44 +0000
Manifest this update: Wed 06 Aug 2025 19:00:44 +0000
Manifest next update: Thu 07 Aug 2025 19:00:44 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: AA7c0aEputREo/MOpvE4AGuKhFyu4/l1gIv/Nf557m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:da:0a:30:ea:e6:0b:ad:25:fa:8a:ef:a2:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Aug 6 19:00:44 2025 GMT
Not After : Aug 7 19:00:44 2025 GMT
Subject: CN=a0eafb86c5272cec7bbd530af486977a212f0c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:c1:60:e2:62:6c:ac:12:b5:1e:72:e6:83:
b8:47:8b:bf:02:9d:0e:a0:77:e6:f6:60:23:71:9d:
24:7b:85:c7:b4:fc:ae:67:92:51:17:85:4f:93:a8:
72:c3:11:a7:52:5f:fd:af:7f:42:92:b4:2c:d1:c5:
65:a5:83:57:0e:aa:99:1f:e5:a6:c6:0d:84:71:89:
b0:05:54:7b:fb:c6:c4:54:4e:5b:9f:6b:7f:9e:7e:
fd:52:5e:e4:e8:0e:81:aa:62:a6:73:16:58:70:c3:
e4:ff:d6:a9:7b:0e:a1:11:0c:83:10:3d:84:b4:75:
c7:ce:4f:64:9e:0a:cc:43:e2:eb:c8:6c:f5:03:3d:
a4:b4:00:7c:38:de:5a:76:39:08:cc:c4:e3:91:f7:
6e:db:71:77:65:73:ad:bc:c5:41:a2:f2:07:d8:21:
83:2f:71:09:b2:87:b0:0a:2b:ef:73:02:49:1b:79:
f4:af:01:44:0d:56:6e:46:bc:fc:fb:a4:74:20:fd:
06:11:63:be:57:75:5b:5c:d4:bf:ac:32:f4:a6:64:
1c:a2:7c:79:b2:96:a7:af:af:b8:d1:5e:6a:55:76:
8d:cb:c2:a8:34:c9:6a:ad:d6:33:5e:7f:45:31:4a:
bb:30:25:42:1c:16:ab:8a:89:41:7c:72:b1:71:18:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:FB:86:C5:27:2C:EC:7B:BD:53:0A:F4:86:97:7A:21:2F:0C:07
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:76:9a:7a:66:92:de:bd:cc:de:f8:0e:3d:fd:92:d9:10:78:
ec:51:13:1b:14:f5:4b:df:56:a7:68:bb:73:97:db:17:6b:2b:
7e:79:db:bc:b7:68:fb:f8:af:6e:70:d6:10:9d:06:15:a8:31:
ba:7c:25:f1:35:70:3a:38:3c:23:a9:43:74:b3:99:b2:11:e2:
89:b9:9c:bc:0a:7e:e1:53:e7:3f:2f:00:f7:4d:98:4d:ee:4f:
b8:77:33:81:6c:0c:d4:b6:a4:20:59:2e:f5:18:f3:1b:89:d0:
69:77:52:82:20:5d:d7:79:b9:db:8d:b5:07:c1:dc:17:b6:8d:
a7:00:c9:6c:50:5a:aa:9c:9a:c9:ed:c5:96:f1:92:48:14:31:
92:c6:ff:70:82:fe:5a:6f:9d:cc:71:cd:d1:f1:9e:76:d2:da:
f5:3d:16:c6:96:74:d7:5c:1f:7d:45:f9:1c:e1:06:37:a0:b6:
43:f8:b0:d6:2c:4d:01:bb:d0:af:77:b8:48:1a:46:aa:1e:d6:
bf:c2:6c:89:4a:ec:f0:10:26:a3:90:22:7e:86:dc:34:fd:52:
db:1c:8b:e7:65:06:ca:5e:46:a0:ca:05:ec:78:d1:b3:00:29:
12:a6:68:76:ba:0e:19:25:e4:53:c0:fa:2d:e5:e0:ef:fb:90:
96:d3:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:11 2025 by rpki-client