Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: tbnoG2kN1NG1xS6U7Vm6h7DTCHLJIZanxSUTh7BdK3c=
Subject key identifier: C2:C8:2C:E5:51:60:2A:DA:B1:FE:0F:3A:8C:38:C4:01:E7:61:50:2A
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019894EDDD7E2C978D17B2974E6CCD362D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0A7E
Signing time: Sun 10 Aug 2025 17:01:13 +0000
Manifest this update: Sun 10 Aug 2025 17:01:13 +0000
Manifest next update: Mon 11 Aug 2025 17:01:13 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: aASE3LGFYOGo3J5h3AMASU4IEzl1i0dOu9gm1Y/kYYc=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:dd:7e:2c:97:8d:17:b2:97:4e:6c:cd:36:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Aug 10 17:01:13 2025 GMT
Not After : Aug 11 17:01:13 2025 GMT
Subject: CN=c2c82ce551602adab1fe0f3a8c38c401e761502a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:94:79:48:1e:c7:44:02:66:15:58:a5:37:
e4:92:b1:e8:56:3a:96:e0:bb:77:18:86:dc:28:ed:
bb:21:79:92:f6:63:a3:c6:9b:90:e8:15:88:db:e3:
2d:31:44:4f:01:9e:30:79:41:b5:89:c1:b1:12:c4:
d2:0d:70:7f:07:96:dd:cd:61:e3:c4:2d:9f:19:93:
37:30:33:fe:7f:3b:d2:77:a2:08:9b:ac:b1:76:b4:
22:30:99:52:36:c8:0a:ba:10:b0:0e:3d:79:ba:82:
85:f7:5d:00:e9:00:c1:81:de:0f:b0:22:60:52:d6:
6f:55:c0:a3:c7:23:2e:a6:3d:33:39:96:2d:2e:a7:
e8:5b:34:14:3c:15:81:70:73:4d:49:71:bb:db:b9:
3d:5a:e6:28:26:d3:13:e6:6b:28:d1:06:39:b4:2b:
bb:98:24:ef:67:6f:ff:a9:0c:82:ed:1b:86:2f:26:
f0:f0:c2:0d:cf:1a:fb:18:21:49:60:86:2d:f5:fb:
71:21:b9:f5:08:78:8b:e8:31:60:4d:77:15:f4:89:
c1:26:0c:a3:e1:1a:a3:a6:b5:18:1b:c0:85:01:de:
7c:bf:68:1a:6a:7f:72:37:c0:05:d1:00:e0:9e:54:
cd:cc:96:c3:4f:a3:b9:75:83:cc:5c:29:2c:4d:71:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:2C:E5:51:60:2A:DA:B1:FE:0F:3A:8C:38:C4:01:E7:61:50:2A
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:36:01:14:16:bc:ea:67:6f:48:f6:1f:6e:04:47:e9:5e:bd:
06:9e:15:d0:8a:1c:dd:9f:08:a2:ec:4d:b7:c8:7d:8b:32:a8:
4b:32:a3:7b:e9:b4:07:af:90:c4:db:02:df:52:60:b4:dd:1a:
1b:a2:fb:4e:df:84:5d:85:22:e5:2f:48:d2:ff:8e:b8:c8:74:
5d:e7:6c:93:f6:38:ab:62:e7:38:f1:6e:c8:19:3e:3c:1d:b9:
e3:d6:2e:3b:10:a7:28:54:14:21:2c:4f:0e:66:de:9b:f2:a1:
e0:90:4c:e2:26:c1:42:8f:4f:a9:8b:68:f5:45:fc:b5:a0:60:
78:a8:5e:21:1d:c3:fd:b9:9d:e1:35:6b:ea:8e:6b:a6:f9:5c:
68:e9:65:7e:ee:0a:e1:07:b3:8b:7d:6c:12:74:69:47:b9:80:
1e:da:30:8f:88:9a:f8:b5:f0:f5:ac:9f:b5:2e:0c:60:80:ff:
13:7c:55:1d:eb:b7:e7:ec:e4:69:a4:07:19:4c:2b:0c:8e:88:
d8:65:20:92:e1:b1:45:fc:32:68:c2:05:8d:29:5b:8c:65:af:
97:6b:4b:68:45:b5:bc:0d:63:84:99:51:f1:69:ac:54:e9:b3:
54:f5:9b:f8:35:90:8f:81:16:ad:95:36:61:47:14:9f:60:f4:
de:54:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:10 2025 by rpki-client