Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: 9626sD+kTK/ETd5bIJTyTPBfb+wOhigsT3KxmT3imbU=
Subject key identifier: 6B:F7:5F:F7:0E:8E:E3:4F:D6:34:62:16:7B:64:D5:65:C5:9A:9E:97
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 01983B04DE7AC220B2C60E094C945C3E3077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0B9B
Signing time: Thu 24 Jul 2025 06:00:31 +0000
Manifest this update: Thu 24 Jul 2025 06:00:31 +0000
Manifest next update: Fri 25 Jul 2025 06:00:31 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: A/O1tOY4hVC5CdqkvKQak4FdJQy947HOtJPMtSKfUQ8=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:04:de:7a:c2:20:b2:c6:0e:09:4c:94:5c:3e:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jul 24 06:00:31 2025 GMT
Not After : Jul 25 06:00:31 2025 GMT
Subject: CN=6bf75ff70e8ee34fd63462167b64d565c59a9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:f8:ec:2e:01:f0:35:69:89:23:03:8c:22:
44:97:f7:b1:bf:82:95:15:a0:86:90:dd:98:a2:cc:
f4:9d:83:8a:1f:96:14:c8:ca:68:45:cf:eb:ce:48:
6d:c5:4e:fe:e5:01:d3:b8:40:67:02:00:28:49:41:
0d:6f:ba:98:79:8e:2c:0e:14:0c:74:30:f1:50:38:
0d:08:06:91:53:52:25:f6:b1:71:47:65:76:84:df:
42:99:4b:de:ff:24:f2:f0:95:fd:a2:ef:45:f1:5c:
ae:f4:c2:dd:13:98:62:d7:f0:9f:22:d3:49:3a:1d:
ff:eb:51:0e:e9:15:c6:4d:20:a2:39:07:27:04:f3:
e8:dc:95:e2:d8:7d:d2:d2:9a:89:84:14:bf:4b:f3:
ce:bb:f8:2c:f8:7f:b9:45:7c:8c:bc:34:c4:1c:2a:
f3:7b:c6:ae:b9:a2:1a:9a:02:0f:f1:5a:e0:0d:76:
a2:50:ca:e2:af:77:6a:a3:be:c6:ba:e3:b0:9f:22:
04:77:ca:4a:12:09:c7:f9:e8:48:30:48:e3:f8:45:
31:2b:af:59:fd:9a:85:65:39:1f:2a:29:c7:ec:d3:
23:41:90:11:21:a3:c9:6c:07:44:e6:c3:f2:5a:20:
0f:f5:d8:5b:29:db:9f:22:b1:05:3e:e9:c4:ad:58:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:5F:F7:0E:8E:E3:4F:D6:34:62:16:7B:64:D5:65:C5:9A:9E:97
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e0:bc:3e:70:94:de:da:df:72:85:ed:d2:b2:9e:45:99:72:
b6:0f:0c:3e:be:10:db:7b:14:b9:6a:da:33:93:99:b4:cf:25:
6d:e2:8a:fd:95:64:5c:70:62:cc:9b:6a:90:56:65:9b:6d:8a:
40:b9:d5:4a:df:20:8b:b8:0c:59:12:c2:7f:c3:3c:f4:ea:22:
ce:ef:74:3f:c7:7e:8b:9a:27:cd:6c:3b:32:a1:51:d6:7c:66:
46:56:8c:8c:b7:64:a6:b3:a8:ae:3a:90:01:8c:3b:7b:cc:01:
1a:02:81:6a:54:a5:65:82:14:8d:77:e3:3d:0a:e6:fe:c7:3a:
c2:99:81:b5:1e:21:a7:57:58:35:9c:60:a3:38:51:de:96:d8:
58:6d:c2:00:36:ae:0f:6f:85:13:f3:c4:ad:bd:0f:f2:b4:7b:
53:6f:25:7f:bb:8f:b8:71:4f:d2:31:f6:ec:12:b0:e4:ec:52:
e5:ca:83:4a:d1:0b:a9:4b:8b:5e:21:c2:28:74:b7:f3:ad:2f:
13:d1:d4:14:40:1f:e1:3e:47:d2:10:92:e5:51:2b:95:e4:cf:
d1:a8:74:19:60:bc:2e:ce:2e:2d:2f:f5:12:7d:98:b6:9c:ef:
e4:90:2a:ef:13:70:dd:73:e3:ee:a5:1f:8a:55:40:0f:a4:3e:
23:f6:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:53:15 2025 by rpki-client