Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: 6LZ+4LYZJ4fIizyds3rF54aCXQIkE6bp0CmluaP/1v0=
Subject key identifier: 61:73:3E:38:6F:5F:EF:CC:BA:B5:8A:41:C2:AA:DF:CB:4B:D7:4A:21
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 0198462D9AC5ABD5DD60FC50CC7CDD5376ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 10:00:50 +0000
Manifest this update: Sat 26 Jul 2025 10:00:50 +0000
Manifest next update: Sun 27 Jul 2025 10:00:50 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 9MyCwT/sV3jqSCpqEw1pnm3hgLTWzO7O29F7TIwy/aE=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:9a:c5:ab:d5:dd:60:fc:50:cc:7c:dd:53:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jul 26 10:00:50 2025 GMT
Not After : Jul 27 10:00:50 2025 GMT
Subject: CN=61733e386f5fefccbab58a41c2aadfcb4bd74a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:e8:92:7e:5f:de:01:96:27:94:d7:3b:e0:
ba:06:96:ba:32:7d:da:38:39:ab:db:6e:80:a7:b9:
8d:84:bc:be:7d:68:fd:dd:d3:f1:5d:59:a2:99:ca:
56:14:ff:1e:e3:fb:ea:f3:e9:c4:68:e3:80:1a:1c:
c9:70:b8:0a:d0:96:57:13:c0:1e:2a:1a:a2:29:7f:
60:0f:3e:50:94:7f:62:ab:8f:55:e3:5a:f0:4b:40:
84:76:4b:52:90:63:27:37:d3:bb:01:5b:d5:bc:51:
8c:6f:12:c3:3c:0a:54:be:7f:ea:34:c5:4b:f2:db:
fb:e7:5a:6d:0d:2e:69:79:ae:a0:b9:72:e4:bc:51:
8c:6b:7f:be:45:ba:89:40:85:71:18:b7:d1:45:ea:
90:49:23:af:9b:26:06:0a:7d:b6:4b:be:54:e6:b5:
30:54:67:44:a9:61:2c:b5:c9:2c:62:43:55:92:a9:
d9:92:db:4d:3f:b7:d1:d5:eb:f2:67:a4:52:bc:9c:
67:c5:d8:02:57:d8:bd:48:b9:b2:d2:ab:22:40:a7:
a5:de:44:08:29:d1:b0:34:c3:54:c7:86:5c:b5:49:
bf:18:25:e4:53:81:ee:1d:0b:39:fa:24:cb:40:a4:
1c:d2:e7:1f:d2:73:ab:c0:90:28:4b:fa:44:de:e6:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:3E:38:6F:5F:EF:CC:BA:B5:8A:41:C2:AA:DF:CB:4B:D7:4A:21
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:86:db:82:89:5f:8b:d2:c0:c2:2b:74:5c:f9:d3:8d:eb:
38:86:f9:ea:af:32:95:59:54:23:ea:54:1f:c8:ba:23:07:84:
ed:4c:76:56:0b:a5:30:35:17:c6:49:f8:21:ab:7b:f1:c7:4b:
c1:d6:95:06:64:62:96:cd:24:58:2a:c5:7b:0f:32:44:5a:2b:
eb:4c:e9:b9:64:e1:d2:d7:ae:36:f3:8c:20:a8:a7:ba:15:a7:
00:b1:59:fa:b9:1a:b4:ea:bd:61:e5:8c:4c:0c:af:92:02:df:
c2:44:af:3e:b9:65:90:48:43:57:ba:be:5e:59:d2:d6:09:05:
76:b6:77:39:05:62:c0:1e:9a:6e:83:fe:af:52:3f:04:66:6c:
4f:de:2d:e0:e1:1b:e1:30:87:a5:90:61:08:a1:c1:65:4e:44:
e9:1c:8b:9c:86:17:a8:3b:5c:67:02:83:c3:7c:08:29:f8:7d:
75:ad:06:60:60:07:2a:e7:2b:5b:2d:fb:2e:55:c3:6a:02:59:
b6:fc:35:74:14:e8:8c:b5:75:02:47:6e:68:41:2a:59:88:db:
92:b7:18:94:c9:2d:7c:d9:75:37:31:24:f0:44:b6:31:fb:b6:
1e:5a:1f:79:26:c9:b1:c9:a6:06:a4:52:ab:c5:55:4e:8b:eb:
51:b1:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:46:36 2025 by rpki-client