Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: tgw27Jss7HtgfhzUgRFqHfXLnKG7eb7QcyKZYBClKCs=
Subject key identifier: 12:B4:FF:21:F5:94:89:B1:FD:FB:46:34:95:8A:2A:9F:62:96:50:23
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 01988A331CFCC69F5EB9C9CA1E704C42D966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0DBF
Signing time: Fri 08 Aug 2025 15:01:02 +0000
Manifest this update: Fri 08 Aug 2025 15:01:02 +0000
Manifest next update: Sat 09 Aug 2025 15:01:02 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: xTHgu0vACdxwsX2W/Ksl3aXh1vR9uGpYP8riFLpuW+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:1c:fc:c6:9f:5e:b9:c9:ca:1e:70:4c:42:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Aug 8 15:01:02 2025 GMT
Not After : Aug 9 15:01:02 2025 GMT
Subject: CN=12b4ff21f59489b1fdfb4634958a2a9f62965023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:f3:d4:86:d5:be:51:9c:73:c4:a4:5a:95:
a0:88:c0:7d:cd:b7:f0:3a:1e:0f:d3:41:6f:a8:0d:
21:4d:8a:c7:fb:06:3e:20:5b:77:45:03:76:e2:44:
a5:86:a6:9a:b6:b2:ac:e9:e5:6b:6f:cf:39:c4:fe:
66:4d:4b:7d:01:e9:3e:6e:34:fa:f6:78:81:b2:1b:
97:5d:9a:11:9c:14:69:d6:74:e0:29:d6:e5:b2:21:
42:52:1e:5b:bc:fd:3a:37:7e:a4:c2:b9:46:f0:3e:
f9:36:d0:5e:fc:71:49:d7:a4:f5:15:ca:9e:4b:27:
dc:2c:f8:80:93:ec:5d:cb:9c:eb:8f:3c:b5:21:d5:
e1:09:35:48:6c:ca:81:41:e5:cd:93:54:f8:42:3b:
59:97:e0:1c:9c:6e:e6:0d:7f:89:de:de:75:48:cc:
74:27:f3:aa:6e:85:1b:44:e3:ba:13:ec:ba:e4:c9:
9f:a9:a8:0c:d0:4a:91:a8:18:9f:4a:1a:f1:cf:6e:
d0:f7:db:7e:f0:ca:24:ab:63:ed:6f:fe:00:7e:98:
6b:95:79:ce:43:ed:5f:7b:ac:1f:fe:99:4e:26:e3:
12:77:36:78:3b:4e:fc:a1:62:91:8a:dc:30:1e:64:
ee:a1:c1:a9:97:60:5d:e4:8e:9b:e8:bc:70:34:5f:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:FF:21:F5:94:89:B1:FD:FB:46:34:95:8A:2A:9F:62:96:50:23
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:81:d7:84:63:96:fb:f1:16:63:24:a4:81:5f:52:46:77:cb:
ec:b4:23:41:91:0b:b2:ee:db:ed:89:c5:92:b2:9b:d1:52:dd:
c1:ce:49:e1:85:37:47:5f:70:1f:6d:90:23:40:c7:df:f8:bb:
a1:bf:a1:ce:2e:60:8b:9a:96:2d:6c:90:45:39:03:a6:41:f3:
35:f9:af:9b:17:69:69:92:59:dc:0d:eb:a3:23:25:5f:d8:e4:
a2:8c:7f:f3:c3:d9:1a:44:b1:e1:49:05:58:5f:00:88:0c:61:
d5:d3:2d:80:c9:bd:da:c7:6b:59:9f:53:56:d6:8a:54:d4:8a:
f7:98:cb:00:d2:49:6f:76:4d:cb:46:45:14:be:20:97:ca:1d:
2f:61:82:25:2d:07:90:55:d6:03:6f:8d:14:72:e1:68:fb:73:
68:74:62:9b:70:1e:8b:1c:92:b8:34:f9:71:d2:65:1f:31:24:
4c:d6:98:f4:93:38:3d:e9:9b:9f:32:39:ca:d6:e1:81:a6:9c:
92:86:3c:f4:41:de:ec:45:49:e7:8f:6b:a1:91:56:e7:df:84:
21:86:d2:df:6b:e9:aa:c0:78:04:87:a8:18:01:1d:2d:5b:43:
51:bf:2f:be:75:dd:59:f3:3e:50:ff:cd:62:22:d2:58:bd:a1:
0f:b7:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:40 2025 by rpki-client