Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: OCskhZ1RMvN3jE2ybQPOAjWLv+zaiTSSGhosGexsq2Q=
Subject key identifier: 0C:6B:B8:98:96:77:27:E4:67:97:6C:D3:90:12:42:D3:E4:42:60:64
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 01985FB6728DC8693C6282AADCFADBD522AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0DA9
Signing time: Thu 31 Jul 2025 09:00:49 +0000
Manifest this update: Thu 31 Jul 2025 09:00:49 +0000
Manifest next update: Fri 01 Aug 2025 09:00:49 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: UXZ1qKwFX5FJ86LAm4GgXXOL9psLERjHXl9EGeWdGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:b6:72:8d:c8:69:3c:62:82:aa:dc:fa:db:d5:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Jul 31 09:00:49 2025 GMT
Not After : Aug 1 09:00:49 2025 GMT
Subject: CN=0c6bb898967727e467976cd3901242d3e4426064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:09:45:ba:65:cf:29:37:50:c5:41:f9:6c:
63:71:0d:83:3a:b5:ba:10:d4:18:e3:e0:e1:a5:ad:
df:b6:1f:ab:e7:36:6c:30:ce:04:05:2d:1f:41:31:
79:05:6e:66:e6:42:1e:9b:91:4c:ff:b3:39:b7:8f:
4a:63:40:8b:c7:cb:da:38:3b:84:9c:31:a9:52:e2:
c2:5d:1a:8b:0f:06:f3:c0:ac:16:46:b1:af:43:26:
fb:19:22:9d:9e:30:19:94:f7:81:f3:ae:d5:7f:fa:
c8:dd:b7:3c:c7:df:a8:19:45:bc:79:ca:97:60:e2:
f7:94:46:10:6a:d8:1d:50:a7:98:88:8f:61:66:aa:
ad:61:d4:dd:5e:5a:de:ed:f0:68:2f:74:9d:f8:b5:
9a:64:ea:b0:e5:c7:f1:4d:f3:98:f1:2e:c1:33:86:
60:4c:19:cd:55:a7:1e:7b:fd:4c:67:dc:1b:9c:52:
ab:16:40:d4:d2:45:1e:92:cb:e6:04:b1:6a:4c:2c:
c2:ad:e9:33:89:d8:cd:83:1b:a3:64:bc:87:0a:79:
e6:f9:0f:a3:82:82:f3:11:f3:4f:8b:0c:90:04:56:
12:69:39:4b:bd:87:d3:9a:8a:21:b8:75:8c:15:a0:
b2:5a:60:eb:1a:76:21:67:2f:34:8d:4e:2d:8d:e8:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6B:B8:98:96:77:27:E4:67:97:6C:D3:90:12:42:D3:E4:42:60:64
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:5f:42:d8:97:d3:6e:37:ed:95:9f:d1:e5:65:80:13:be:
4b:7a:3e:b4:45:37:bb:56:e0:3c:fe:d4:c1:fb:62:51:f7:22:
7d:72:dd:33:ad:ea:ed:1c:f4:d1:0e:69:60:9c:40:31:f3:16:
fd:2f:b7:95:c8:a0:6b:57:22:45:68:6c:6c:55:f0:57:07:1f:
58:e4:9d:ba:2e:40:a7:4d:85:14:49:26:d4:73:1c:8e:42:fa:
e2:68:17:d1:75:16:eb:33:b5:2a:2d:b8:94:9d:a8:9f:24:00:
3c:d5:2f:52:42:b6:a2:03:b2:2c:cf:9b:ab:9f:4e:76:50:31:
00:94:3e:12:78:99:7f:bd:b3:bb:05:bb:58:78:b6:95:20:aa:
8f:fd:e8:d6:88:b1:a0:fe:55:c9:7a:88:e3:4e:49:63:d8:1f:
31:d1:91:0a:91:f7:f9:47:a4:89:cd:d1:b9:c4:c7:31:13:ae:
2e:a9:44:96:19:df:8f:a1:9a:2b:a6:b0:aa:e3:a0:92:ff:96:
13:e5:a8:45:a5:56:55:e8:85:04:23:5a:36:5e:f7:98:51:f9:
0f:07:7c:20:ee:fc:40:a2:ce:60:04:b7:99:a5:a8:50:c3:7b:
10:2e:4f:00:83:b5:7f:1c:ad:80:61:df:47:d5:f9:d2:c5:33:
75:f1:e4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhftnKNyGk8YoKq3Prb1SKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy
ZGYyZGYwHhcNMjUwNzMxMDkwMDQ5WhcNMjUwODAxMDkwMDQ5WjAzMTEwLwYDVQQD
EygwYzZiYjg5ODk2NzcyN2U0Njc5NzZjZDM5MDEyNDJkM2U0NDI2MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48JRbplzyk3UMVB+WxjcQ2DOrW6
ENQY4+Dhpa3fth+r5zZsMM4EBS0fQTF5BW5m5kIem5FM/7M5t49KY0CLx8vaODuE
nDGpUuLCXRqLDwbzwKwWRrGvQyb7GSKdnjAZlPeB867Vf/rI3bc8x9+oGUW8ecqX
YOL3lEYQatgdUKeYiI9hZqqtYdTdXlre7fBoL3Sd+LWaZOqw5cfxTfOY8S7BM4Zg
TBnNVacee/1MZ9wbnFKrFkDU0kUeksvmBLFqTCzCrekzidjNgxujZLyHCnnm+Q+j
goLzEfNPiwyQBFYSaTlLvYfTmoohuHWMFaCyWmDrGnYhZy80jU4tjeiOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxruJiWdyfkZ5ds05ASQtPkQmBkMB8GA1UdIwQY
MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt
N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5
LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeRfQtiX
02437ZWf0eVlgBO+S3o+tEU3u1bgPP7UwftiUfcifXLdM63q7Rz00Q5pYJxAMfMW
/S+3lciga1ciRWhsbFXwVwcfWOSdui5Ap02FFEkm1HMcjkL64mgX0XUW6zO1Ki24
lJ2onyQAPNUvUkK2ogOyLM+bq59OdlAxAJQ+EniZf72zuwW7WHi2lSCqj/3o1oix
oP5VyXqI405JY9gfMdGRCpH3+Uekic3RucTHMROuLqlElhnfj6GaK6awquOgkv+W
E+WoRaVWVeiFBCNaNl73mFH5Dwd8IO78QKLOYAS3maWoUMN7EC5PAIO1fxytgGHf
R9X50sUzdfHkhA==
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:11:20 2025 by rpki-client