Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: ejrIOYPdSu/V6m3W29GbSMLOpJrNvWLOC4AA7gQOn70=
Subject key identifier: 55:F3:65:75:E1:9D:8A:BF:DC:62:8E:29:BB:D2:F3:F3:AB:6C:44:ED
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 0198752C43EC573A7D4E257321558DCC468A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0DE4
Signing time: Mon 04 Aug 2025 13:01:31 +0000
Manifest this update: Mon 04 Aug 2025 13:01:31 +0000
Manifest next update: Tue 05 Aug 2025 13:01:31 +0000
Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: sAyondL1rBEcK/vWywIiEDE0ZTXCq9dEFZ+8ZGm6hd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:43:ec:57:3a:7d:4e:25:73:21:55:8d:cc:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Aug 4 13:01:31 2025 GMT
Not After : Aug 5 13:01:31 2025 GMT
Subject: CN=55f36575e19d8abfdc628e29bbd2f3f3ab6c44ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:a6:a3:a7:49:c8:91:48:5b:9a:07:34:20:
f7:31:17:73:b8:50:59:fb:11:b2:bf:35:aa:f0:15:
cf:b6:bc:33:5c:da:df:43:79:c5:96:5a:fb:be:8d:
9e:c9:e1:f0:5c:54:fd:ca:d9:0f:0d:de:81:73:94:
26:0e:67:d0:d8:df:59:7a:31:a5:f8:60:b9:a1:85:
74:d7:02:73:bf:a6:49:c9:6d:c6:63:f7:8e:84:84:
c7:45:05:f2:6e:4a:87:ca:26:85:bc:a4:5f:9e:05:
3b:f8:ce:56:54:c3:53:93:72:9d:93:09:76:83:b5:
e1:4e:f7:72:a7:f2:52:8b:5f:6f:1b:c0:b9:c7:d4:
41:ed:b1:79:54:f8:a9:74:b8:f3:5b:fb:cf:5f:50:
89:4c:87:56:47:6e:08:7e:d0:33:f5:ec:fa:5c:3d:
f3:76:7d:72:18:e4:27:a9:3b:30:54:a0:59:05:4d:
10:d4:ab:88:fa:6b:92:9c:00:ed:75:46:ca:08:18:
c6:aa:a7:48:d3:37:03:c6:16:5e:f2:17:62:16:fa:
c1:ad:fe:9a:e9:19:70:bb:12:32:ad:01:0c:bd:c6:
2b:6e:f0:10:23:b4:6e:4e:8d:0f:51:f4:bc:21:22:
2b:c1:23:f5:c3:ba:6e:0d:20:98:68:42:ad:c0:6d:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:65:75:E1:9D:8A:BF:DC:62:8E:29:BB:D2:F3:F3:AB:6C:44:ED
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:47:55:5c:e7:8a:9f:44:19:8d:29:89:bc:25:0b:f8:ba:
cb:ea:72:56:7c:ed:c9:88:e7:0f:47:2b:a8:65:d3:43:f9:a8:
dd:af:43:d1:58:9b:a0:ed:3d:b1:5d:c0:cb:44:82:ff:7e:c5:
95:42:ba:b5:74:e2:86:29:2f:3d:d2:5f:f3:01:c0:3e:be:b1:
76:7f:61:3f:1e:87:ac:c1:5d:f1:37:2b:d6:41:ff:48:60:45:
09:81:39:f5:6f:85:89:0a:62:81:a4:f2:2b:5f:1f:43:5e:34:
00:9b:61:e4:c1:f3:7b:7d:10:c2:5d:77:12:67:e1:cd:23:01:
67:1e:d2:0a:fc:c8:03:6b:5d:7e:5c:21:e4:62:6e:d9:94:18:
88:12:49:da:f6:be:b9:44:ca:7b:43:de:3c:68:86:f0:e9:96:
cc:00:e3:1f:4b:8a:a1:93:b8:32:b9:fd:a3:92:a3:46:63:31:
ad:19:b6:f2:1c:82:dc:12:63:9e:d6:4b:f6:4b:9e:5d:c4:3a:
3b:3d:7b:7f:f1:61:09:a7:d9:39:27:3c:4d:76:e0:d7:09:de:
87:d9:a3:c3:cb:60:48:20:5a:d2:11:38:c4:53:56:fe:f9:2d:
a0:08:51:6f:39:1f:e1:14:3c:91:2f:02:0f:c2:23:54:09:a5:
04:d4:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:39 2025 by rpki-client