Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: K5gG9nDVsZ5/M1QU1VEV0oRugFbnCemNkM6yN/dXpig=
Subject key identifier: 74:7C:CF:D8:3D:45:96:9F:A1:19:B4:1D:E2:62:0F:7F:63:DB:FE:01
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 0198499BE3A1F05237ACCC00F79D592FF9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 1615
Signing time: Sun 27 Jul 2025 02:00:09 +0000
Manifest this update: Sun 27 Jul 2025 02:00:09 +0000
Manifest next update: Mon 28 Jul 2025 02:00:09 +0000
Files and hashes: 1: 0_EpdViy3Y27mqejc66l1--sjBk.roa (hash: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=)
2: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: J/lUyIYnsxrwH7eBIhcJhfN42x/WaTulpEXwZBHD1/A=)
3: LcFyOrobUrG-q36ENaVBWkIxyec.roa (hash: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=)
4: mJjYnvCF0aJWwcOO87dJLulTej8.roa (hash: cyYF0//qn6HDiGNvk9163fm1e6ldk0sS9GYuhZI3HqU=)
5: oOM7QrbyKmK3sX9tSspvcF4LQYc.roa (hash: FI0q4cfrXLcPzOiQWzP6cR+1RIpvdT5irQXBJq3jipE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e3:a1:f0:52:37:ac:cc:00:f7:9d:59:2f:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Jul 27 02:00:09 2025 GMT
Not After : Jul 28 02:00:09 2025 GMT
Subject: CN=747ccfd83d45969fa119b41de2620f7f63dbfe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:36:95:6d:a5:6a:32:d6:85:3c:c1:6a:e6:
78:46:8e:92:75:6a:18:a4:29:18:89:6b:ac:03:00:
18:dc:f0:39:22:5b:0f:48:7a:f0:77:91:e4:b1:11:
a0:f1:95:a4:0e:5d:a9:25:62:11:a0:43:7c:34:62:
1d:d3:c0:29:20:cd:72:12:77:54:40:14:15:cc:cb:
36:77:2c:5c:11:d9:82:49:06:1a:7e:55:b6:c7:a8:
58:40:a6:e7:0c:03:c5:0d:ac:b3:c4:b0:91:9c:0c:
92:ae:f8:30:0d:e2:b6:c3:f0:5b:45:bc:7d:4b:50:
a1:e5:85:88:f7:58:38:80:97:07:30:9b:96:0c:da:
cd:c9:ad:ea:40:ef:72:dc:8d:28:64:24:7b:79:18:
55:09:14:01:7c:f7:94:e7:70:b0:27:5c:ab:b5:d0:
dd:78:c8:b6:d9:01:28:a3:b5:fd:5b:9a:98:2c:79:
e3:7c:24:a5:23:a7:05:b1:e2:61:80:40:b2:8d:3e:
c4:e5:53:3f:71:48:f3:86:35:91:5b:75:4e:c9:3e:
e2:7d:a0:10:0a:de:0b:00:00:e9:6a:55:75:20:93:
a1:cd:eb:92:31:7d:59:5e:4c:a3:86:d6:a8:a1:e3:
73:dc:95:ed:06:37:4a:a0:8f:91:34:9d:04:44:f9:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7C:CF:D8:3D:45:96:9F:A1:19:B4:1D:E2:62:0F:7F:63:DB:FE:01
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:63:80:0a:48:18:41:45:44:51:54:ee:f0:55:13:e1:5c:5b:
2b:4f:d5:3b:a5:de:98:b8:90:4b:a0:a1:53:de:8d:0f:7c:a2:
41:4b:78:6e:64:4d:34:94:74:48:b2:a3:73:ca:70:0f:26:d5:
4e:10:39:a3:a8:9f:bb:b3:5c:f2:fb:0d:6f:32:1f:c7:15:c2:
f9:b1:e6:a4:6e:39:ee:d4:17:a3:8c:c5:ab:f4:3b:23:e1:c4:
5a:22:0b:20:fa:b3:c0:c3:6f:69:28:da:07:ef:52:a0:47:28:
f1:4f:ce:cc:d9:cc:7f:06:7d:80:36:1d:e5:55:c3:f0:ab:c9:
9a:fe:a1:e9:cd:8a:05:2f:97:ca:85:2f:3c:5c:bc:98:84:3a:
21:fb:35:fb:00:1d:3f:0f:e9:e3:22:df:12:9a:f4:13:55:ce:
31:90:54:56:fa:1a:b6:74:8d:96:d0:b3:b3:8e:97:0d:70:78:
05:25:c6:d7:d9:84:e3:ad:b4:f4:1b:50:b2:b1:20:d8:59:67:
35:94:d8:29:58:3c:5b:64:bc:f4:b8:a5:74:ee:8b:32:5b:01:
7d:f7:fb:4a:c0:28:f8:fb:4f:de:a5:c1:4a:c4:bb:49:3e:30:
7d:18:d3:14:57:c7:9c:5b:47:ed:90:5f:60:f6:72:c7:0f:4b:
8c:13:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:30 2025 by rpki-client