Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: 4RUXqE5+mtPAlBwQuR0I5/2Ga73R7+ZZaQ/LmxDelg8=
Subject key identifier: 43:7C:A7:5D:7D:26:2C:7C:6A:26:A0:4B:93:76:6A:AF:1B:4E:5A:97
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019849D35C1E1E55AD490E8EDAD0100983CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:45 +0000
Manifest this update: Sun 27 Jul 2025 03:00:45 +0000
Manifest next update: Mon 28 Jul 2025 03:00:45 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: oHGVjklv672QUAQt6htox3J1U2xMaItRU04fnfixKf0=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5c:1e:1e:55:ad:49:0e:8e:da:d0:10:09:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jul 27 03:00:45 2025 GMT
Not After : Jul 28 03:00:45 2025 GMT
Subject: CN=437ca75d7d262c7c6a26a04b93766aaf1b4e5a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:0b:2c:6f:25:be:4d:98:cc:61:74:e2:52:
29:b7:4c:17:0e:b3:a7:a7:e7:1e:72:26:fa:8f:5a:
c3:d4:5e:ad:55:94:bd:70:56:5e:50:e7:cf:e3:f8:
e6:af:65:2f:6c:29:8d:98:2a:2f:f3:7d:8f:5d:fb:
6a:fc:70:34:9e:b0:ea:d2:72:dc:bc:d7:b2:e8:47:
51:ad:16:a0:bb:f8:51:b5:b3:82:86:6c:35:a2:0c:
0a:f5:08:23:e8:f0:ae:f8:fe:43:f8:e9:e2:15:b8:
e8:b0:bc:b4:9f:54:99:ea:e6:ca:71:5d:a1:9a:3f:
2f:80:a1:83:08:27:3e:76:08:08:dd:f1:66:3d:bc:
08:06:48:ee:89:a7:b2:fd:d2:70:49:a0:41:e1:f8:
a5:30:ec:58:cb:f9:6d:f1:6e:19:f8:50:4c:2d:61:
34:c7:56:97:dd:a2:ed:f5:10:e2:65:c2:06:8d:a9:
dc:18:ef:8a:ca:d9:6c:84:a9:a9:70:f0:cc:4d:34:
93:95:ad:58:81:f0:df:78:09:a2:38:8e:a5:41:37:
b8:8e:13:ab:35:43:40:ac:64:e6:05:6d:da:d9:e4:
47:7c:76:23:d9:f3:7e:28:1c:c7:37:8c:36:61:1e:
ed:59:53:77:58:1f:67:e7:cf:e8:03:6f:c1:4e:89:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:A7:5D:7D:26:2C:7C:6A:26:A0:4B:93:76:6A:AF:1B:4E:5A:97
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e6:dc:d2:bb:9e:f7:bb:0b:40:e1:43:1e:20:fe:3e:19:3f:
f1:0b:04:01:61:bc:7f:d6:a0:92:fb:6c:ff:dd:b3:00:92:4e:
eb:d8:d4:3b:ec:a1:49:4d:a3:41:64:59:35:30:46:f7:3b:19:
3b:81:99:19:d8:90:71:19:26:ba:c3:bd:7e:75:22:0f:ba:c3:
d8:d5:5a:dd:96:ac:77:1d:12:39:d1:eb:6b:93:b5:f5:66:41:
00:35:a3:bf:e5:cd:f1:7d:f7:e6:e6:09:8f:10:c5:72:f5:2a:
e8:d8:04:26:e3:92:44:b8:9e:5b:7b:d3:2b:3e:93:14:20:c9:
35:f9:d5:40:d5:26:71:c8:71:fe:82:0a:e8:b3:da:ed:b4:63:
37:81:fd:30:c5:fa:07:9e:79:8d:b7:96:4a:40:ee:75:fd:97:
91:03:d3:7c:4d:7c:ec:d1:5e:e9:0b:7a:f1:45:8e:b5:14:2c:
e9:70:54:a6:41:11:49:2b:93:9d:de:fc:d1:e8:b7:e9:b9:84:
dd:72:97:a0:d5:8f:3c:57:c7:f1:5f:b7:77:93:23:3f:43:a5:
a0:56:22:e5:3a:e9:06:a2:4b:be:a0:f9:ec:58:cc:77:ee:6c:
32:3c:d3:f2:5f:6b:6f:d8:90:21:7b:85:a0:37:75:d0:f8:77:
d6:40:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:54 2025 by rpki-client