Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: wZZzAqn9O/AvFgmo2/x3TR5WUGo7K0RIkyVj4/IrQJc=
Subject key identifier: D8:89:3D:79:1D:0D:46:38:60:AD:A5:12:47:D8:79:FE:3A:80:B7:9C
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01987486A606C0003894DDC4BF79C5C22BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 10:00:37 +0000
Manifest this update: Mon 04 Aug 2025 10:00:37 +0000
Manifest next update: Tue 05 Aug 2025 10:00:37 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: 8991OzVm07qyzV9cuc5SdJrEEB0mSmpf3foH1sDf71Q=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:a6:06:c0:00:38:94:dd:c4:bf:79:c5:c2:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Aug 4 10:00:37 2025 GMT
Not After : Aug 5 10:00:37 2025 GMT
Subject: CN=d8893d791d0d463860ada51247d879fe3a80b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:02:e0:81:a1:18:14:f4:5a:bd:76:42:c7:
ec:a7:3e:47:5a:ee:7c:fa:b4:81:3e:62:fe:7c:87:
f1:1c:8e:be:8e:0e:23:2c:42:7f:b7:d0:18:85:64:
86:2d:a4:7f:eb:c9:31:b9:48:fa:1c:ec:72:40:4d:
48:cf:12:81:c2:e8:1e:f0:c6:1e:c3:f4:8a:90:b0:
1f:b7:63:ca:ed:f3:ec:9c:76:91:8a:47:ee:2b:d5:
e8:f4:22:13:e8:29:1c:de:ba:7e:b7:46:74:73:b2:
b0:2c:dc:ce:54:20:61:23:17:30:a1:d9:37:26:59:
eb:4d:0a:36:3b:ff:56:ac:89:a8:ef:44:5a:82:4e:
3d:4a:9d:70:57:4e:e3:00:8f:ff:37:c4:4b:3f:67:
0a:8b:85:3e:a5:37:66:7d:c3:81:64:02:ec:80:7e:
b8:4a:af:b1:3d:80:0d:b3:59:c0:b0:82:3e:72:64:
3a:7b:c0:67:fe:ed:be:c5:b1:e2:2a:8d:3b:a7:7f:
19:78:1f:5f:b9:2c:9f:f7:d3:54:0e:09:15:1c:09:
62:05:6b:a5:ca:82:9d:ab:a0:cd:4e:e8:58:04:e0:
a3:6b:99:f8:c8:d7:0e:c8:e0:04:79:95:7a:d0:78:
1c:92:63:ba:46:d2:19:6a:e0:ac:af:1e:cd:78:47:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:3D:79:1D:0D:46:38:60:AD:A5:12:47:D8:79:FE:3A:80:B7:9C
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:f7:ef:4c:f1:10:56:9f:a5:bb:0a:ef:af:2a:00:4f:31:
05:64:dc:b6:87:25:8b:87:67:e7:b8:b2:23:07:02:9b:43:77:
0a:11:52:1a:a8:85:ec:1e:5d:b2:ed:a3:48:03:ff:89:0b:24:
1e:f0:3b:35:a5:78:a4:34:89:e8:6d:17:32:db:98:00:a2:a7:
72:af:52:f0:d5:84:94:24:28:26:d4:55:f9:2d:12:83:a9:95:
0d:d7:66:4b:00:45:db:58:08:94:b8:1c:2d:98:78:6e:7c:27:
64:71:82:fe:05:2c:d5:6d:fd:e5:61:e1:18:0d:d1:06:ab:53:
65:7a:32:26:87:a9:5d:ee:3b:2a:6c:0a:0c:8e:3a:64:ff:67:
52:dc:54:22:f4:c8:9c:62:27:62:b1:f3:ca:a0:61:2e:7a:40:
11:1e:ac:8a:00:e8:01:21:9a:e6:16:b8:a3:af:16:f2:93:2d:
f8:ad:0d:b2:95:dc:99:4d:e3:8c:9e:a2:07:48:40:14:09:fe:
a1:f8:cb:bc:72:35:f8:14:88:d0:09:4c:d5:35:f2:73:aa:09:
c3:f3:3f:34:4e:cd:71:d3:17:a9:8c:22:6d:19:eb:ea:2a:60:
03:27:64:6f:12:9c:5e:64:c1:51:01:14:4b:8e:b6:bb:7b:d8:
73:2e:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:18 2025 by rpki-client