Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: 3KhtG80K/dR97f7nNLZzLxa71K6JMFp0msg2vKNLSIU=
Subject key identifier: EF:A0:32:DA:BE:AC:C0:5A:44:1A:5A:B7:5B:7C:6F:BE:BE:08:34:53
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 0198530D727AD59831FD8C4DCA1C3A9FDEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0DBE
Signing time: Mon 28 Jul 2025 22:00:46 +0000
Manifest this update: Mon 28 Jul 2025 22:00:46 +0000
Manifest next update: Tue 29 Jul 2025 22:00:46 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: 6WIMuOY01f2OmvMgXsQlkDI/mU4khmBF2dpfaEhz16M=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:72:7a:d5:98:31:fd:8c:4d:ca:1c:3a:9f:de:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jul 28 22:00:46 2025 GMT
Not After : Jul 29 22:00:46 2025 GMT
Subject: CN=efa032dabeacc05a441a5ab75b7c6fbebe083453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:bf:d6:ae:96:0d:bd:54:fe:68:55:f1:a8:
e9:c6:9f:09:d1:08:c9:e7:27:b9:39:4b:e7:29:38:
5a:21:33:a8:c9:da:26:ad:23:61:ec:86:78:40:7a:
31:8d:ea:e8:9f:ed:37:e2:ab:0c:1a:a9:d7:54:e7:
6a:cb:c8:05:45:07:4c:5f:6e:29:cf:07:56:64:ef:
37:f3:cc:d8:ac:11:c4:5d:f4:c8:63:95:e3:7d:28:
5a:c1:8e:0c:7b:1b:66:1c:c2:b6:d7:0f:81:d3:a6:
d9:15:76:6f:75:c3:00:63:cf:21:b5:59:55:7c:8b:
fd:24:c0:3c:39:6e:97:de:c7:e3:4b:dc:1b:d4:37:
1c:3b:7e:69:a8:25:8a:5d:64:72:5f:1e:01:50:eb:
a9:ad:a2:bd:0d:d5:14:dc:d7:2d:4f:04:45:89:57:
dc:a4:89:86:60:41:48:bb:e1:f9:0d:86:2f:8b:57:
59:4f:cb:0b:88:1f:2a:03:2d:96:e0:ad:bd:c4:46:
24:10:d1:a9:7d:8f:4e:41:e8:72:1b:06:54:cb:d5:
d7:8f:f9:82:4c:26:58:c1:7e:94:fc:3c:56:5a:e1:
79:8b:2d:3a:0a:3a:86:23:67:c9:5d:df:84:72:43:
f9:1b:89:27:35:1a:cb:ab:3a:04:37:5a:bf:b7:30:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:32:DA:BE:AC:C0:5A:44:1A:5A:B7:5B:7C:6F:BE:BE:08:34:53
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:de:a2:ab:f0:85:bd:0f:ec:c8:02:53:07:9d:44:5c:87:36:
17:66:32:7e:d4:e5:53:01:64:7a:1e:c0:d2:56:6c:f1:b1:a0:
ed:27:23:a5:46:81:a1:a8:a3:4b:e2:32:fc:39:02:c0:da:8b:
25:4b:4b:ba:00:d5:e8:c2:39:20:f6:62:63:c1:05:ff:7c:5f:
38:a2:4a:65:95:a7:18:07:ff:14:15:ca:5b:23:f8:6b:e5:67:
31:92:08:33:3b:de:dd:a2:aa:3b:84:ed:8a:d5:b1:c2:7d:d5:
ef:f5:d3:8d:70:e5:35:23:4f:71:8b:2d:e2:53:66:48:90:e7:
69:4a:cb:0b:f5:52:c9:91:81:74:9d:fd:39:47:3f:d5:f1:72:
d7:c1:f3:76:19:99:cb:84:a7:5b:94:bf:67:5d:3b:61:d9:95:
4e:ac:28:66:a1:11:46:1a:88:4a:9f:c9:6e:37:eb:28:8d:39:
df:b3:54:9a:94:46:36:70:2c:68:bc:d8:3d:f3:78:46:2f:03:
69:82:be:75:06:ae:45:ef:87:6b:bf:11:b1:60:31:ca:82:7c:
36:d8:2f:82:9f:53:0e:ff:52:2d:14:46:25:66:f9:50:05:92:
83:7b:54:a7:84:27:0d:21:8a:4f:0e:a6:42:5e:0a:13:07:99:
c0:60:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:15:13 2025 by rpki-client