Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: SyCZlYZ9F5VSPriW86gBg2hX/mcrOfZzwmtyU5rTeqE=
Subject key identifier: B2:D9:0D:7F:DA:E9:A8:A5:FF:77:CD:07:DF:7A:75:B9:48:26:29:AA
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0198567CAD79421F94E8800EF58EFFA94DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0CEE
Signing time: Tue 29 Jul 2025 14:01:08 +0000
Manifest this update: Tue 29 Jul 2025 14:01:08 +0000
Manifest next update: Wed 30 Jul 2025 14:01:08 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: BcmkzzWOHJhiW/HH2NjN56rRPnyoGLz7Fivbxm1Zd5o=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:ad:79:42:1f:94:e8:80:0e:f5:8e:ff:a9:4d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jul 29 14:01:08 2025 GMT
Not After : Jul 30 14:01:08 2025 GMT
Subject: CN=b2d90d7fdae9a8a5ff77cd07df7a75b9482629aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:93:de:4c:6a:4c:f8:a2:3a:f5:b8:5a:c8:
64:e4:a0:bd:70:6a:b8:7c:52:60:e0:a4:90:82:61:
b4:1d:23:3e:1c:ea:3a:18:84:47:df:99:94:ab:ea:
c3:ea:8d:75:96:c3:19:ac:45:b3:e0:f6:30:7d:21:
c7:4f:83:89:5d:0f:24:a4:ca:45:b5:76:bf:60:22:
72:e7:0d:c2:94:6b:b2:df:e9:c7:f0:fc:9c:9d:bc:
4b:8e:78:b9:49:d4:b5:36:bf:c2:24:b2:d6:40:d6:
63:86:02:fb:ff:74:db:77:41:e5:92:45:b7:bb:fe:
96:4f:4d:0d:d2:06:29:f4:b4:ac:68:0b:75:34:75:
46:77:2e:10:10:5e:53:9e:53:2d:4a:4e:ce:4e:6b:
94:95:d5:1b:c4:9b:8c:49:ac:7d:00:74:db:c5:d2:
05:cf:3d:21:ac:d3:d0:89:84:72:6a:5a:a2:39:ef:
fb:cd:67:51:8e:c9:da:a6:f8:8b:b8:78:da:e8:10:
ef:a6:a7:e0:fa:81:17:33:1b:3d:60:41:88:0b:12:
65:e0:5e:aa:30:77:ca:5b:d1:35:1c:1a:61:fb:73:
b9:4d:1e:5e:ab:bb:e0:d2:cf:99:6d:16:e4:3c:94:
7c:79:cb:41:1e:e2:a5:24:ad:b3:79:07:54:ba:fc:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:0D:7F:DA:E9:A8:A5:FF:77:CD:07:DF:7A:75:B9:48:26:29:AA
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:6f:17:65:7b:41:17:1b:36:58:f7:57:a0:a8:16:b4:d8:
30:26:2e:07:84:ec:ac:46:cd:7c:d0:f1:08:b9:3c:f6:af:5d:
1b:61:eb:ec:98:1f:cd:4c:e7:a0:72:f8:2f:e1:93:db:2f:35:
43:20:44:bb:02:d2:2f:be:4e:7c:4a:37:df:1a:5c:6f:bf:7c:
36:f6:7c:43:08:78:d1:e5:4e:53:a0:13:ce:06:9d:23:82:73:
b0:a4:a4:d1:95:63:96:71:67:ae:c6:82:3e:2e:49:7a:8d:f2:
c4:58:9a:f6:18:7f:c8:0d:fe:0d:6c:16:ee:6a:be:a2:f4:77:
c1:23:18:75:62:65:d0:8f:b5:62:43:74:c4:95:18:da:d1:2e:
2a:8f:03:76:58:96:e8:55:16:ad:5b:40:84:6a:79:43:05:8f:
ec:95:af:e4:c3:33:2d:c2:34:64:73:c3:b5:b2:ae:51:97:68:
82:28:04:d2:11:61:6e:13:fa:41:0c:6c:21:bc:b5:83:27:e6:
6b:a2:d7:09:94:6f:fc:3c:da:34:d9:01:21:25:aa:bd:38:56:
87:c8:f6:c2:de:68:12:3e:19:d8:eb:c4:14:47:d2:08:bb:0e:
68:5f:ab:de:8a:ba:ad:de:f7:34:97:c6:7c:e0:00:59:61:69:
dc:b1:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:33:27 2025 by rpki-client