Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 9l8cOWEW4kfsiggPk/kcnZBvVLZl0k6SbVzfn+Rlk8I=
Subject key identifier: B0:55:F9:4E:0D:9A:5C:69:61:42:59:BF:FF:0E:F8:36:53:E8:45:33
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 01987B9BEEB2DEBE81069B3A6CCC315AC590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 03F0
Signing time: Tue 05 Aug 2025 19:01:13 +0000
Manifest this update: Tue 05 Aug 2025 19:01:13 +0000
Manifest next update: Wed 06 Aug 2025 19:01:13 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: C+fWEkjxy7GxnTSc/24rQqDhhLIGTIgRin6OD9rtsxg=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:ee:b2:de:be:81:06:9b:3a:6c:cc:31:5a:c5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Aug 5 19:01:13 2025 GMT
Not After : Aug 6 19:01:13 2025 GMT
Subject: CN=b055f94e0d9a5c69614259bfff0ef83653e84533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:f3:05:70:8e:9a:e6:99:bf:16:62:63:ad:
6c:8f:44:5b:b0:ad:56:2f:3b:40:cc:80:76:f8:17:
3e:06:78:3e:a9:99:71:01:2d:ea:08:5b:8c:68:ac:
3d:46:95:84:9b:49:6a:97:f7:1d:3c:33:ad:80:7f:
df:6f:07:a7:04:c3:b6:37:7c:a5:b5:38:6a:c7:11:
86:27:2b:df:7d:80:22:d1:22:4a:ae:95:d5:73:21:
39:6b:19:9f:5c:d6:29:51:9b:ea:ab:b3:5d:7f:dc:
33:68:41:f3:99:73:04:32:bd:33:6e:c3:0e:db:06:
5d:40:0f:27:67:24:94:9a:29:7d:37:96:0b:02:7c:
f0:86:d2:5c:12:cd:e7:54:96:3d:78:c7:86:4a:02:
70:8c:7e:da:8b:7e:32:54:db:4c:ca:c5:82:fc:bc:
87:e6:1d:6d:77:b2:ca:2f:ad:54:db:dc:a7:48:48:
25:59:6e:6a:d0:ec:3e:04:ee:d8:5c:19:2a:00:49:
60:5f:8a:22:5c:0a:66:84:28:2b:1b:db:55:cd:7e:
e7:8c:33:1a:c3:3f:80:7b:7d:fc:46:04:a2:f1:94:
b4:e0:b5:25:85:77:94:10:8e:ea:60:93:74:8e:fc:
5d:7c:3d:1c:63:bd:c4:dc:f2:5f:bb:95:2e:fd:65:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:55:F9:4E:0D:9A:5C:69:61:42:59:BF:FF:0E:F8:36:53:E8:45:33
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1d:de:86:a4:24:ea:ed:b3:cb:a0:fa:9d:fb:a1:0a:a1:a0:
ce:73:82:a3:42:05:13:98:64:03:e2:f6:c7:f4:65:5f:51:28:
b3:92:a9:f3:6d:10:cd:b1:dd:ae:ae:b5:48:47:2f:34:d7:77:
54:bf:56:23:3a:d3:87:cc:c6:82:c9:a3:93:12:d7:2f:41:56:
be:71:19:40:71:8a:e2:71:b3:be:c4:68:b9:68:05:be:ad:93:
ee:31:2a:99:ea:2d:cf:05:87:56:41:50:e8:11:54:83:d3:2a:
21:b1:4e:53:bc:0d:85:d6:6e:a4:93:e7:1b:49:67:3c:35:ea:
34:f3:f6:b9:a6:01:6a:a0:c3:dc:2a:86:03:4b:56:34:b9:92:
67:ae:66:38:8c:b9:6f:97:ba:03:4f:24:e2:60:90:4d:17:8d:
b0:aa:33:4d:1c:45:16:45:ed:85:3f:83:10:7e:2c:2e:7b:0a:
9e:60:1f:c7:3f:e0:18:79:69:c3:d6:b4:9b:7b:7b:55:60:58:
ac:34:de:d8:6b:2a:b6:52:c6:d6:5e:84:4e:3c:95:8a:d3:ec:
ec:6f:3b:e5:39:90:a9:db:f8:c1:e4:7b:be:2d:33:14:9a:d8:
06:3c:52:61:a0:f9:e7:7d:77:ec:c6:96:0c:44:d1:b4:2f:91:
21:bc:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:21 2025 by rpki-client