Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: DQKVT51hcJSZRtQRM0zEaEXuE2RReD/2TI6+UPi9Vus=
Subject key identifier: 17:59:6B:41:50:60:AD:79:12:5C:F1:CC:55:DA:25:FC:10:9B:AE:96
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 0198808B8F47626355C31850CFC143453EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 01ED
Signing time: Wed 06 Aug 2025 18:01:26 +0000
Manifest this update: Wed 06 Aug 2025 18:01:26 +0000
Manifest next update: Thu 07 Aug 2025 18:01:26 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: JRSpBJn0cLuo2y4La+2KTwuAqaxB4ynwWVgQdc+PjZk=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:8f:47:62:63:55:c3:18:50:cf:c1:43:45:3e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Aug 6 18:01:26 2025 GMT
Not After : Aug 7 18:01:26 2025 GMT
Subject: CN=17596b415060ad79125cf1cc55da25fc109bae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:bf:6b:cc:01:e4:29:aa:fd:d1:94:46:20:
d6:13:8e:0c:10:0e:58:0a:1c:ce:1f:04:34:b5:05:
08:d7:93:94:d1:eb:02:aa:61:44:d3:fe:05:aa:19:
f8:7f:e0:48:cc:1d:da:76:20:2d:70:c1:a0:ea:c7:
87:18:f0:a1:9a:ba:d4:0a:25:a3:5d:9f:e2:d0:71:
23:1d:a0:6c:45:a3:67:20:a8:9d:13:08:6c:bd:2d:
07:a6:da:4b:ca:0b:f9:d9:a9:c7:fb:10:5d:df:d6:
a4:4e:65:9e:58:98:93:ff:45:b6:4f:01:c3:da:40:
90:77:39:2b:a1:7f:03:8e:1b:35:53:f7:16:74:a4:
48:1c:1e:1f:77:27:3d:b4:a5:04:ae:b2:13:2d:3c:
85:d3:05:bd:ee:a8:16:16:47:3b:9d:33:c0:af:01:
ee:be:3a:d9:df:13:2e:b4:17:11:8e:39:95:f8:eb:
d7:54:7e:4e:4a:e0:55:08:c1:15:cd:38:a0:9e:88:
50:04:ee:65:80:df:fd:8a:76:bd:77:0e:a8:79:71:
37:64:a4:e3:6e:f0:3f:8a:d7:1b:72:2a:63:14:94:
e1:84:97:96:c0:77:db:24:73:f7:50:78:9c:36:5e:
ad:e4:1b:4b:a3:49:33:25:03:0a:f2:99:94:b2:f0:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:6B:41:50:60:AD:79:12:5C:F1:CC:55:DA:25:FC:10:9B:AE:96
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:02:4b:f4:ed:f6:e4:ae:0d:8a:df:80:4d:d0:01:5c:66:
2e:00:30:38:76:1c:47:10:34:18:45:a0:2f:14:d3:e6:9d:d7:
0a:c4:db:e9:9f:61:8c:fb:f7:ef:b7:be:33:eb:7b:31:bb:20:
2d:93:42:41:da:30:1e:97:f5:43:8f:ae:66:08:b2:9c:bc:4c:
59:7f:76:dc:19:dd:85:ac:9c:11:30:bc:b2:69:bd:60:d3:98:
3a:e7:f1:c6:0a:c8:38:72:b7:ef:89:4d:8b:61:d4:96:64:52:
fa:87:75:a8:db:76:91:ae:2c:de:01:91:ec:66:16:34:37:ca:
2e:d2:18:71:c5:39:e2:af:31:b0:7d:8c:63:58:af:23:04:af:
35:ca:d1:69:9b:20:b0:33:24:f7:48:bf:6e:ac:f4:df:f5:92:
75:61:b7:cc:c3:ff:f2:33:07:65:13:b7:29:46:82:3d:9f:d1:
d2:5c:2e:1f:fe:47:ff:9a:37:3f:ff:84:57:aa:ac:be:dd:06:
ff:49:40:fc:88:66:8c:21:39:ad:78:0c:7f:d8:de:4b:0d:24:
6c:be:fd:45:73:70:4e:3d:5f:e1:18:d2:10:b9:8b:bd:3d:71:
5f:27:06:40:38:1d:e0:c6:89:e6:17:b8:2e:18:bc:92:11:6f:
77:40:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:57 2025 by rpki-client