Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: +LseKozkhjgXlmdgLrQvLZh+nISP8ASUF/UpXczTxr4=
Subject key identifier: 58:AC:74:CE:E7:ED:94:6A:59:F5:24:CF:9D:9F:E0:B0:08:14:ED:67
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0199179AB1B629565AFF5934AB84F1E356F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 130B
Signing time: Fri 05 Sep 2025 02:00:37 +0000
Manifest this update: Fri 05 Sep 2025 02:00:37 +0000
Manifest next update: Sat 06 Sep 2025 02:00:37 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: CJOjdzJDQTfPLq4jmVlLdB4zIiEWj4CqZRh2oqu4UQM=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:b1:b6:29:56:5a:ff:59:34:ab:84:f1:e3:56:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Sep 5 02:00:37 2025 GMT
Not After : Sep 6 02:00:37 2025 GMT
Subject: CN=58ac74cee7ed946a59f524cf9d9fe0b00814ed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:13:a1:f8:6a:ac:b8:50:fc:80:6d:a8:fe:
9b:ed:46:1f:0a:1a:fe:66:06:8a:eb:73:44:19:bb:
82:86:f5:a2:68:4c:6b:80:e1:22:ca:de:52:19:8f:
3c:97:55:74:b3:67:f3:bd:03:64:6b:4d:fe:bc:b1:
eb:5e:36:97:82:00:e7:ec:65:06:0a:c5:2e:4a:16:
97:34:12:b5:35:65:1b:6f:08:9d:e1:40:81:11:47:
49:e3:ba:3e:fb:c3:ce:7f:7c:ec:14:99:fb:89:46:
ad:2f:25:de:76:1a:20:ec:05:16:3c:ce:ce:8a:fc:
96:3f:c1:68:89:44:68:34:53:6f:40:70:31:9c:0f:
45:52:25:5a:6e:4d:de:73:c6:4f:53:20:f9:28:92:
9c:5f:f5:ab:6f:d7:30:44:0d:df:a0:c5:a6:6d:cf:
aa:f7:1d:e2:38:2c:2f:2a:d0:7a:cb:86:22:65:34:
39:34:09:d9:62:9d:61:a8:62:d0:3f:5a:b6:f5:0e:
91:26:c9:e0:d3:f3:6e:5a:ad:bc:f0:22:8b:c5:87:
dc:f5:45:73:2b:93:16:00:bb:ec:8a:e0:ad:b5:20:
1c:30:65:fe:b8:b9:35:8b:80:7f:96:f9:fd:62:19:
5c:ad:0b:60:f3:88:01:56:73:3d:11:59:7b:f0:39:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AC:74:CE:E7:ED:94:6A:59:F5:24:CF:9D:9F:E0:B0:08:14:ED:67
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:47:5f:1c:df:17:0e:93:1c:b4:7b:1a:24:8b:fa:19:32:0b:
fb:34:f5:dd:08:81:70:97:8c:ad:51:b3:a4:a5:d4:1c:24:2b:
e3:f9:69:f7:01:4a:27:72:ac:bf:86:bb:e3:50:0c:9e:86:cd:
4e:7d:fa:b2:40:07:59:40:e4:67:0e:a5:98:c9:4e:6a:ef:0a:
e4:27:da:c9:d7:83:80:36:b0:b2:c0:d9:b9:ad:3e:45:db:aa:
f9:31:e7:b8:64:f9:1e:11:2c:25:e6:c4:f7:5b:e3:67:3c:22:
4c:74:5e:91:f7:9b:3a:ef:c5:19:b9:6e:cc:28:d7:49:63:4e:
bb:1e:40:1e:4f:f6:d3:91:37:cb:81:54:37:21:e0:0f:ca:45:
c9:6d:c3:80:ba:77:6f:e1:d2:83:58:10:3d:66:fb:6e:77:81:
c4:af:ee:11:d1:26:cb:d4:d9:ba:d4:84:23:90:21:2b:b2:b1:
f9:93:b0:88:85:f8:b8:e6:d6:7a:9b:af:ec:3e:c0:38:07:b6:
f6:5f:31:27:16:1a:4d:54:ac:d0:76:b9:3f:8d:a8:3b:35:0a:
62:b2:9a:3e:ca:9a:ab:8f:77:24:80:ac:4c:f1:2f:33:26:c6:
25:29:19:18:c4:62:7a:0d:50:6f:9c:f8:58:ea:8c:8a:7f:ab:
03:b2:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:32:17 2025 by rpki-client