Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: gSXRmtryUyyjr0kfvHYc9fBNGHVArE/+iH7346g7GcM=
Subject key identifier: 8C:2C:B3:08:94:10:88:75:B6:0D:B7:54:2E:6B:2F:E7:A2:03:4A:F7
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019849D34C3E16F68BA061C23CE539F32CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 15B0
Signing time: Sun 27 Jul 2025 03:00:40 +0000
Manifest this update: Sun 27 Jul 2025 03:00:40 +0000
Manifest next update: Mon 28 Jul 2025 03:00:40 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: JIsgApImVK3e5EY3oeGCG62zZw+xwCdAWs8Az1SI1is=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4c:3e:16:f6:8b:a0:61:c2:3c:e5:39:f3:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Jul 27 03:00:40 2025 GMT
Not After : Jul 28 03:00:40 2025 GMT
Subject: CN=8c2cb30894108875b60db7542e6b2fe7a2034af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:a3:fb:fc:5c:1c:7e:9c:c3:7f:4b:38:30:
a4:49:8a:f7:8d:f8:63:93:50:83:5e:cc:f4:c3:e5:
bc:17:e6:0d:7c:ca:6d:b4:c7:9a:9c:8c:99:73:68:
6b:78:a6:bf:c4:eb:c4:f4:e4:13:38:0e:0d:58:b3:
fc:06:3d:c7:70:37:46:14:09:c8:c9:8d:a3:c1:32:
d0:7b:e8:a8:55:ea:3e:22:6c:dd:2d:22:bc:a4:1d:
7b:91:81:81:34:c0:f6:17:45:4c:cb:cc:43:12:c5:
6f:3b:39:0c:4f:e4:51:8d:65:86:03:1a:af:36:fc:
fc:2f:aa:7d:da:f8:75:53:9a:46:ac:b8:1d:f6:2e:
f6:1a:65:c7:c0:bb:86:d0:2c:f1:13:71:43:5d:bb:
c1:12:7d:9b:92:b4:0e:03:15:66:85:be:da:63:cd:
9b:c1:46:61:43:3a:b2:e0:8e:39:c2:61:c2:f5:7f:
15:b6:de:c0:89:89:cb:aa:d2:35:5e:5a:32:83:b7:
5c:16:bd:df:54:8e:5f:5b:b4:96:bd:47:db:db:56:
56:4a:d3:e5:2d:47:c5:b3:84:1f:4f:16:36:39:76:
7e:56:7d:aa:a0:58:c2:5b:1c:a9:5a:7f:f2:b3:0b:
88:3b:0e:63:90:13:7b:b4:7d:4d:81:ee:46:63:e6:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:B3:08:94:10:88:75:B6:0D:B7:54:2E:6B:2F:E7:A2:03:4A:F7
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d3:b3:70:a0:5c:f6:cb:9b:be:77:ac:8c:83:89:cb:e3:e1:
17:d5:f8:41:89:93:e4:45:06:a0:fb:38:31:a3:d5:d8:85:26:
b0:ee:ff:25:ec:e5:9d:ff:a5:15:e3:aa:e9:98:09:48:86:a7:
79:67:7e:f1:32:80:1d:86:2e:f6:57:1e:6b:d4:ab:fe:6e:d0:
1d:3a:17:c2:d6:b8:86:20:34:ff:7b:d3:7b:7a:dc:92:ae:46:
1f:c9:9a:87:ab:7b:11:2b:0d:61:03:fc:92:a4:3f:18:56:d6:
db:06:e9:b5:b8:0f:94:99:99:31:06:2b:a3:51:28:1f:71:19:
61:cc:08:aa:69:d0:be:2e:9c:ed:96:75:5a:b2:3a:2f:e9:7a:
d8:c7:66:17:3a:f2:b9:fa:c1:7d:21:1f:df:d6:58:3b:12:0b:
db:25:22:48:0d:3f:56:30:ff:66:87:80:1b:bd:6b:c3:91:86:
89:d0:24:93:ab:88:46:84:8d:c6:33:e1:a5:82:96:3c:f9:a5:
7a:2c:2a:ef:c7:fb:8a:36:be:6a:93:b6:fc:a4:19:97:9d:0f:
3b:a9:7c:6b:0d:37:ae:a3:7e:30:b5:37:06:ab:da:b4:1e:45:
48:a7:19:1b:32:5e:dc:9c:eb:70:8c:ec:52:04:04:a7:5f:47:
96:28:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:24 2025 by rpki-client