Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: F3Wq78/Y+/FlunY8jGp5YkDplA3T6CK4Pxj8+oqFUJk=
Subject key identifier: 6D:E5:28:BC:BD:76:31:75:30:B5:A2:31:AF:02:2C:41:4C:F5:35:EE
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 0199233128BF24B033408B68F82B04EE6E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 1218
Signing time: Sun 07 Sep 2025 08:00:48 +0000
Manifest this update: Sun 07 Sep 2025 08:00:48 +0000
Manifest next update: Mon 08 Sep 2025 08:00:48 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: /mY3299Pg1YF1NbQCIfEYonQjhuNGmRUseRJejwtQIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:28:bf:24:b0:33:40:8b:68:f8:2b:04:ee:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Sep 7 08:00:48 2025 GMT
Not After : Sep 8 08:00:48 2025 GMT
Subject: CN=6de528bcbd76317530b5a231af022c414cf535ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:62:59:0b:d0:60:a4:2d:e2:d5:90:02:6f:
64:a2:78:ef:8a:96:2b:95:e8:2b:4d:cb:a9:c7:61:
64:e8:68:4d:2f:d7:63:54:1c:18:24:2c:b7:1a:8e:
13:f3:ad:8c:70:19:77:0f:dd:8e:ed:ca:8a:f6:a3:
1c:3f:4f:70:57:9e:3d:6e:24:9e:df:06:fc:93:c3:
ca:7e:25:ff:87:97:2f:c5:bf:98:aa:78:d0:84:44:
5e:f8:c0:f8:10:38:4c:f6:dd:c8:b3:9a:33:5c:16:
a2:b0:54:ae:b3:05:29:20:46:f4:d1:d5:da:c2:1d:
0f:c4:64:3a:07:f1:42:14:25:07:7d:e9:86:79:54:
f9:ac:5d:4e:51:d1:08:55:86:a6:f6:0c:f7:81:1d:
f9:28:a0:de:99:f7:38:b1:c0:9d:86:25:fe:25:16:
96:61:35:b3:23:22:0b:8a:16:b9:21:2c:4f:81:1a:
c9:59:1b:76:71:aa:10:6b:9b:77:11:a1:e7:a3:78:
c0:e1:65:dd:86:a4:ad:a8:23:ec:92:3a:6a:c8:75:
85:1d:36:b3:1d:4e:5c:36:56:f4:7d:3e:bf:89:89:
79:dd:48:bc:e3:a9:d9:42:9f:a9:3e:10:67:87:1e:
c0:51:8b:57:fd:92:1d:31:08:0c:4a:eb:e9:ae:aa:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:28:BC:BD:76:31:75:30:B5:A2:31:AF:02:2C:41:4C:F5:35:EE
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b6:27:a5:85:13:72:96:3e:33:c1:db:57:93:fb:e8:45:97:
9c:bd:65:22:86:7a:5d:d6:b3:a2:ed:f9:6e:6c:0f:6f:85:01:
61:05:22:b7:2f:b9:8a:13:d9:2e:62:ec:bd:88:a9:24:b9:a7:
15:37:8e:4a:29:7f:6c:40:3a:16:7a:49:1d:0b:69:c1:03:c9:
27:3b:c5:21:a9:82:98:5b:56:31:8f:68:a3:a8:44:05:18:d4:
95:35:d0:2c:14:e7:8b:d2:d4:47:14:85:7f:aa:eb:7c:68:04:
98:a1:da:da:58:cc:d6:be:50:be:2d:13:79:71:bd:3c:3f:4e:
6d:5b:62:04:d1:83:92:b6:5d:67:c1:01:d4:b5:38:26:54:62:
3d:cf:6b:58:da:5c:b1:d6:85:dc:d1:de:4d:51:6b:52:07:99:
19:31:78:cf:27:d1:83:94:04:f9:db:3c:2d:64:14:76:76:e9:
2d:5a:82:59:1d:19:c7:0a:1a:99:04:aa:ba:b8:a7:42:e0:b1:
4c:54:09:db:6c:4d:4b:a2:f4:e0:a1:5f:59:fc:46:2f:ed:25:
0b:10:28:8b:b9:b0:15:63:98:b3:6a:de:9f:53:a6:9b:b1:8e:
0b:3d:c4:68:27:7e:37:15:4d:b8:16:da:1f:33:53:71:6e:98:
84:82:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client