Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: YicqCHYg5WDpmo9atf9TjOBK7CN/xnEYhrkh5Id8UIU=
Subject key identifier: 79:D8:61:5F:3C:33:26:71:36:3C:07:EF:21:09:B8:F2:3B:84:81:CA
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 01987D8AA03E334C3A05B41190482A97A303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 0735
Signing time: Wed 06 Aug 2025 04:01:33 +0000
Manifest this update: Wed 06 Aug 2025 04:01:33 +0000
Manifest next update: Thu 07 Aug 2025 04:01:33 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: 0pdaE9yWlALOOMMKQWA/p6cRLiEGjgDKHFSWp5XwXHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:a0:3e:33:4c:3a:05:b4:11:90:48:2a:97:a3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Aug 6 04:01:33 2025 GMT
Not After : Aug 7 04:01:33 2025 GMT
Subject: CN=79d8615f3c332671363c07ef2109b8f23b8481ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:eb:b1:96:a7:04:23:5a:0d:cc:ff:a7:fc:
28:2f:4e:b1:64:ac:64:74:0c:73:4e:57:49:a7:51:
2e:c2:ad:1a:0b:56:26:6e:81:76:e0:5b:ee:12:a3:
f8:47:09:cd:34:10:46:85:64:dc:8f:96:54:d0:6e:
0b:b0:c6:6f:20:81:31:02:ec:36:81:fe:24:fe:05:
e4:2f:ce:a3:25:f1:6d:5a:08:59:18:1d:a8:03:41:
fa:4a:ce:e0:6b:c0:55:c2:21:ca:2a:af:28:6e:0b:
71:1c:d3:7d:70:e8:0f:05:39:69:c3:0e:29:96:27:
ee:2d:3d:78:87:3b:52:a3:bd:76:d2:c7:f1:be:7f:
60:7b:ee:38:e7:58:06:2c:f6:c6:f4:ba:42:9a:6c:
b8:0a:29:14:6d:31:3c:29:7c:d5:64:6b:17:19:df:
49:81:22:59:3d:22:36:8f:a4:ff:0b:e1:56:b0:79:
e1:9e:38:54:c4:a5:58:14:60:ad:ef:b3:95:c0:bf:
c9:20:7f:74:d8:d9:d2:3b:e1:d6:7d:68:1e:47:7b:
9c:57:37:d5:52:4a:d6:f8:a9:85:d2:ba:bb:40:d9:
5d:a6:00:e7:f1:20:b0:79:7a:49:2c:c3:2f:70:47:
8e:90:e3:3c:4c:0f:5d:87:9b:06:71:03:9a:64:91:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:61:5F:3C:33:26:71:36:3C:07:EF:21:09:B8:F2:3B:84:81:CA
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e5:1c:88:ee:fe:7c:87:3b:e4:53:97:d3:68:94:05:07:20:
c8:e0:d1:4a:9d:f8:48:38:1e:8e:0b:dc:6e:c2:2e:6b:a2:4f:
8b:db:b8:d7:1b:ac:7b:01:33:5f:92:1c:73:0c:47:b5:40:a3:
c9:11:b5:38:33:02:0b:45:f3:83:31:82:19:c8:35:eb:f1:97:
ee:3b:54:67:82:3a:b4:08:19:b4:a4:98:80:61:f1:89:ee:86:
c9:4b:ee:59:dc:bf:4d:d1:70:13:db:40:d0:51:9d:a4:f5:0f:
ad:16:79:6c:b8:95:fc:35:91:bc:d0:38:9c:70:c4:67:07:0a:
8d:55:b6:6b:60:43:7f:07:4e:b9:b2:40:bf:1b:7a:48:36:1d:
32:e5:c4:d0:de:dc:ba:8a:1c:95:08:79:0a:94:c6:6b:95:e9:
a3:e2:cd:92:c8:e7:a0:d6:aa:5a:d8:d9:38:34:35:28:5c:e3:
3d:32:fd:d1:07:11:a9:e8:64:b1:89:9a:9f:6d:2d:ef:a5:2b:
67:3e:62:c2:f6:9e:b7:51:75:a9:f3:4a:fe:fe:f1:63:18:0d:
70:f1:66:77:82:ba:1f:85:23:2d:70:1b:eb:08:74:d0:98:24:
47:59:2c:10:17:2d:2f:31:ff:d5:97:af:21:88:4b:c3:fb:30:
a7:fb:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:26 2025 by rpki-client