Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: t0wYWvwegs7sHBe9ciC4xPxQ4EK+RYvuFDUczil8Ujk=
Subject key identifier: A0:AB:41:1E:26:34:DA:23:AB:C3:97:3A:69:5F:02:7E:60:A2:7C:D8
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 0198925A51C49144196291CBB26E31A9D4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 05AF
Signing time: Sun 10 Aug 2025 05:00:49 +0000
Manifest this update: Sun 10 Aug 2025 05:00:49 +0000
Manifest next update: Mon 11 Aug 2025 05:00:49 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: 7IxU8QftWNIe/tqURCGV6QBTo2nSPWKs07ttM38djyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:51:c4:91:44:19:62:91:cb:b2:6e:31:a9:d4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Aug 10 05:00:49 2025 GMT
Not After : Aug 11 05:00:49 2025 GMT
Subject: CN=a0ab411e2634da23abc3973a695f027e60a27cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:ba:68:17:ae:e3:7d:a2:5f:25:f4:a8:15:
fb:a9:73:54:13:8c:03:bc:eb:f0:c5:be:95:47:73:
66:74:55:eb:d9:29:00:97:c8:af:54:cc:2b:0f:46:
27:c2:8c:12:d4:75:ca:9d:e8:8b:0c:b5:17:14:dd:
78:12:48:39:e3:8f:fb:62:8b:92:1d:d6:44:0c:a9:
be:5b:3b:4e:8e:93:9e:4f:05:36:b1:47:68:7f:ec:
05:0c:fc:12:80:25:a4:38:e9:22:f6:c7:3a:9b:3b:
4b:13:f7:b8:bb:a3:be:42:46:61:32:21:30:e6:e4:
71:bf:e8:bf:78:01:b0:ef:1d:0f:cf:49:98:c4:82:
a2:30:17:aa:64:fa:0b:ab:6f:a2:22:8f:83:e6:45:
97:aa:7d:fb:12:9f:79:ec:22:ed:04:15:76:46:94:
7d:40:df:a9:0b:5e:e1:fd:8a:ab:93:33:ca:04:0e:
ae:b3:79:93:e9:f7:b6:26:58:f0:8d:b4:2b:13:01:
45:9c:20:f7:55:2e:5c:17:c7:fb:f3:45:f2:6e:2f:
23:26:0b:9d:d2:6c:ae:39:ec:94:74:ca:56:ea:17:
0d:b0:d9:19:d9:be:5b:48:1e:de:2f:62:cd:24:d0:
00:12:0a:9f:c2:04:42:18:fd:c6:a8:e5:17:89:4e:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:41:1E:26:34:DA:23:AB:C3:97:3A:69:5F:02:7E:60:A2:7C:D8
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:f8:e0:2f:05:58:e4:62:c0:b7:a6:91:d7:69:07:ac:1a:
86:99:95:b2:3c:cb:7e:df:0c:da:e6:15:c8:c6:c8:6b:e6:69:
11:e1:f1:47:03:3e:96:1d:f8:e7:7e:54:e8:8b:50:a1:16:f4:
43:0e:0a:ba:9c:9e:b8:80:1b:a4:41:21:20:74:20:64:32:eb:
85:80:2e:41:a1:d5:3d:a3:bc:62:0d:ec:7a:40:7d:9a:0d:23:
59:36:d0:45:58:d6:8a:fa:97:0c:e5:02:dc:50:7a:0b:e6:c5:
ed:40:30:f3:07:8a:2e:43:a6:fb:d3:78:07:1b:83:32:c5:22:
b8:fb:4f:15:f9:98:81:35:5c:ca:a5:3a:25:d4:d2:04:30:5f:
3a:75:90:c2:24:49:dc:6e:a2:29:b7:96:91:83:3d:96:ae:c0:
e4:f9:64:0d:88:b7:14:c4:4e:b9:0e:85:74:23:c3:ef:c0:b7:
5e:6c:57:2d:55:bc:c1:b7:ca:e9:5c:b9:8b:56:fa:bf:11:c8:
49:c5:bb:53:52:67:1f:e3:c5:15:fe:11:f3:d9:45:26:58:b7:
12:f8:32:0c:bb:19:95:85:f3:47:c7:b3:39:39:5e:6c:23:26:
88:83:ed:f7:5d:0f:ee:49:42:56:0e:3a:72:20:e1:9c:e2:c4:
64:85:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:23 2025 by rpki-client