Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: 0hKkknxLNnV8asDpp4beAaJ74aVwoBV13uLwWQFTaKM=
Subject key identifier: 68:18:44:F6:78:52:B3:3C:47:D1:86:43:60:0A:3D:8B:CB:51:F0:BC
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019835A795B8212DA3AB27E296BD0D3BC705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 057F
Signing time: Wed 23 Jul 2025 05:00:31 +0000
Manifest this update: Wed 23 Jul 2025 05:00:31 +0000
Manifest next update: Thu 24 Jul 2025 05:00:31 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: 0ZM9AJucLHEP1tTE2gZwvmyi+de19j63HjxHc46D3LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:95:b8:21:2d:a3:ab:27:e2:96:bd:0d:3b:c7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Jul 23 05:00:31 2025 GMT
Not After : Jul 24 05:00:31 2025 GMT
Subject: CN=681844f67852b33c47d18643600a3d8bcb51f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:a5:07:16:a8:bb:67:a0:87:36:93:23:d3:
14:c1:d5:6e:60:48:cd:3b:33:15:e4:a3:27:f7:fc:
70:0c:61:3b:67:89:3c:60:39:6e:cd:be:50:de:d9:
9a:87:ce:3c:5d:22:12:e2:57:7b:0e:fc:18:14:73:
02:7d:13:e7:c0:3e:f1:84:ba:f3:06:e6:13:6f:2b:
3b:4f:4f:44:75:03:f2:4a:52:74:48:67:2a:d8:f8:
02:9f:e0:bf:c1:27:03:b9:2c:4e:4a:81:c3:6e:07:
0a:f6:5d:bb:ed:be:d5:64:0b:6d:12:52:67:77:a8:
9c:8b:b7:74:c1:ba:f6:fd:6b:39:04:cb:82:cc:fa:
06:83:c3:35:fd:cd:e3:d9:40:b3:ca:be:7a:d2:a6:
ec:4c:49:cb:4f:9c:b5:c2:7b:c7:f9:b1:f8:f3:37:
44:66:86:6a:01:99:0b:df:db:50:cb:82:92:00:52:
c1:df:1c:43:39:c5:de:96:d4:e7:99:fd:e7:d0:36:
6d:73:f4:56:6c:8f:73:89:a2:a7:81:ae:54:7c:03:
a4:f4:ed:33:1b:ec:49:4f:a5:c5:1a:97:53:d9:20:
81:3a:37:ec:90:58:9d:ce:5b:17:14:30:f6:7c:29:
f3:04:d8:bc:8b:cc:40:93:61:0e:05:46:c6:83:a3:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:44:F6:78:52:B3:3C:47:D1:86:43:60:0A:3D:8B:CB:51:F0:BC
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5b:e4:56:20:96:06:56:e5:2a:26:76:a5:93:6d:b6:fc:30:
d3:b9:9c:ca:97:74:e0:41:a8:93:85:83:6b:75:88:bd:3b:30:
24:cb:0e:24:8b:2b:bd:a4:4f:bb:1e:f8:9b:3e:d1:86:0e:2c:
41:c6:18:a6:85:10:83:2f:a1:61:ec:a2:58:f0:8c:45:db:75:
5e:90:cc:c6:c9:cd:52:46:8d:02:49:c6:8a:81:a0:9b:2d:97:
5d:9e:d3:df:91:31:ae:45:92:83:9e:cc:1a:1c:ee:e3:42:41:
82:7b:ef:01:0c:6f:c9:d9:53:e9:71:f6:29:f3:2a:58:11:82:
c2:ec:99:9a:ba:a7:1c:6f:62:25:49:80:1a:50:14:d7:c9:1d:
b1:41:82:78:76:96:5d:fd:99:d9:93:99:3d:e7:bc:e2:aa:76:
21:de:b4:86:f6:cc:c8:34:8c:07:e5:44:99:73:62:8b:17:92:
ac:42:60:e8:98:65:4f:5e:2a:0a:07:21:c1:ee:73:f7:98:79:
2c:41:c5:a4:69:03:7d:50:f6:e7:66:84:a8:40:ba:cd:92:be:
9d:01:0d:d5:10:89:b6:ed:9b:9e:c4:d0:8d:b2:27:9d:b4:62:
f3:8e:16:6f:ae:69:53:2c:eb:cb:d8:45:4d:6e:0d:b2:02:ea:
e1:ae:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:21 2025 by rpki-client