Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: Pigi11iQ42T2pMWp7kb5RLw693S3jXDAhB/q4oANJy4=
Subject key identifier: AD:5E:61:F7:04:5E:71:43:38:FD:86:51:E9:E0:C5:D1:37:7C:89:DB
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 01989FDF37F8A5A349BF279BB8FF27749DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 0133
Signing time: Tue 12 Aug 2025 20:01:02 +0000
Manifest this update: Tue 12 Aug 2025 20:01:02 +0000
Manifest next update: Wed 13 Aug 2025 20:01:02 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: gUXVp/uaTktB02BAuAL2ar/EPAGgrAePBwEkCXyxyxI=)
2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:df:37:f8:a5:a3:49:bf:27:9b:b8:ff:27:74:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Aug 12 20:01:02 2025 GMT
Not After : Aug 13 20:01:02 2025 GMT
Subject: CN=ad5e61f7045e714338fd8651e9e0c5d1377c89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:73:3c:df:93:8b:7c:b4:5b:79:8d:ae:be:
83:34:d2:ad:07:22:8e:16:1d:07:36:b7:5f:6c:df:
e6:29:89:fa:82:ee:58:c1:d3:00:e3:b3:4c:44:12:
e4:ff:d8:60:56:42:e8:8c:a9:5b:e0:bb:99:00:c5:
5e:7d:75:36:f5:76:25:ec:98:5d:42:20:7c:a2:a5:
f4:1c:23:fa:27:79:b4:04:8b:98:49:a6:6f:3d:df:
7e:13:0a:87:2c:0e:02:50:60:9e:86:18:20:eb:ac:
fa:62:4e:fb:99:2e:35:49:2b:26:d2:3a:4f:b4:c4:
ba:b8:78:cd:cc:e8:d3:de:9f:b7:c2:53:6c:9a:9c:
41:91:4f:b2:3a:3e:90:d3:0a:a4:f2:30:34:8a:ff:
a9:6c:2d:d2:f4:68:1c:c2:96:c1:b5:2a:80:21:60:
3b:47:ef:88:25:c2:38:01:ac:8b:50:4f:c5:3b:9c:
67:83:77:29:59:aa:2c:91:ea:c3:c7:01:3b:34:1d:
e9:5a:82:e3:a5:86:58:a2:ca:c8:58:b5:55:41:d2:
97:a1:97:3d:44:00:9f:9e:35:eb:17:e9:c3:de:e4:
4c:c4:1e:bd:fa:32:bb:87:de:9c:43:2d:7b:ed:1a:
c8:37:5a:83:27:7b:fa:b4:d1:ef:d1:bd:cc:35:fc:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:61:F7:04:5E:71:43:38:FD:86:51:E9:E0:C5:D1:37:7C:89:DB
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:18:91:e1:50:e4:48:46:a7:c5:dc:ae:e5:b8:21:eb:4c:
e4:63:f4:46:dc:c1:55:8a:d7:86:6f:4b:93:df:75:0b:83:21:
5e:bb:c1:f9:9b:53:6c:f9:5b:28:46:03:7b:cf:91:5b:47:4d:
71:df:24:a1:21:86:c0:19:ca:37:50:3f:b9:0e:67:16:09:5f:
06:09:00:ab:c1:88:ec:14:7b:fd:a0:9a:41:93:3e:a3:b7:c4:
c1:c0:33:71:7e:b2:1a:34:2f:b9:80:be:73:e0:c6:ff:2f:bd:
ee:d3:35:3f:1b:9d:64:bc:c1:76:62:75:26:4d:a7:67:b7:14:
d8:4f:75:6d:c4:3e:7b:1f:f6:2f:9f:d2:49:20:fc:c3:62:05:
be:45:ed:25:78:c6:db:b3:00:1c:eb:86:e0:79:64:39:10:97:
11:cd:8b:ac:14:27:19:5b:47:60:e0:c1:51:f2:81:3e:cf:a6:
00:08:d2:6c:a4:7d:2c:a0:7d:b9:b5:02:89:95:b9:ff:79:c2:
58:51:6b:c8:59:08:bb:9e:50:88:15:e4:5f:0c:45:53:59:f3:
9e:e8:0e:4b:5f:14:29:1b:4c:01:75:3d:c7:39:ab:12:2c:32:
bc:b1:ca:fd:28:35:0a:bb:ad:c8:13:7a:74:a0:e8:dd:a8:b7:
0d:fc:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:32:03 2025 by rpki-client