Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: v/UpnhzlF00suqctWq8IPcZRWPbARUr/wEwkaj7zZpw=
Subject key identifier: F5:F8:2B:89:EB:3E:88:AF:04:60:D4:EA:DB:12:4E:1C:6A:D7:93:57
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 019921B24E64E8FDF89925CCF9B0375C987B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 154A
Signing time: Sun 07 Sep 2025 01:02:37 +0000
Manifest this update: Sun 07 Sep 2025 01:02:37 +0000
Manifest next update: Mon 08 Sep 2025 01:02:37 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: uBPmupk6tyFGCqoXY5hD3oLyJjrNPL2Yx0j0dZ8vmeI=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4e:64:e8:fd:f8:99:25:cc:f9:b0:37:5c:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Sep 7 01:02:37 2025 GMT
Not After : Sep 8 01:02:37 2025 GMT
Subject: CN=f5f82b89eb3e88af0460d4eadb124e1c6ad79357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:2d:41:2a:11:39:1e:da:86:68:c9:bf:e8:
1f:b9:d6:d2:50:ee:01:4d:1d:60:77:4f:b2:4d:72:
70:53:a6:e8:06:5f:c5:8f:cf:1d:b1:f0:c3:72:42:
a6:3a:b5:2f:a8:c0:98:e2:f8:9c:af:ce:b0:4f:3d:
9e:bd:c2:1f:31:b5:ae:80:ed:7b:e1:e5:3b:4f:14:
dd:ae:54:cf:51:6c:61:b3:d7:e6:dd:19:02:02:b6:
9a:76:f9:28:f1:56:3d:de:d8:ba:20:66:67:a0:89:
35:b2:7d:cd:62:32:ad:27:86:b6:1d:76:04:26:8e:
db:54:d5:63:40:d7:e2:fe:6c:a1:9f:c6:0f:b8:e1:
6e:2f:81:95:79:68:56:ad:58:b9:aa:b8:00:7f:ae:
49:ad:b6:e0:e9:ba:15:e4:45:98:4f:52:50:cd:aa:
5b:28:12:80:f3:37:bc:1b:10:d3:1c:7a:bd:df:1c:
1e:07:0f:98:14:2f:c8:9b:af:5c:e6:9c:1b:38:d0:
6f:c5:e1:72:9e:bf:72:ef:cc:aa:d8:0c:47:a9:99:
fe:32:3c:6c:e4:50:e4:de:b2:91:10:a5:0f:d8:48:
5e:e4:d8:da:e3:33:8b:35:29:ac:5c:d0:4d:55:c3:
04:13:78:19:06:94:83:44:73:d8:28:57:a2:28:da:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:2B:89:EB:3E:88:AF:04:60:D4:EA:DB:12:4E:1C:6A:D7:93:57
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:ba:ae:1d:67:13:df:fa:17:78:10:7a:d2:6c:8a:e6:6e:
9e:5b:58:8e:ff:54:e8:9b:5e:ee:10:e4:14:cd:70:2a:32:db:
c7:ea:d5:0f:b4:0b:82:93:f7:6c:d9:86:8a:28:1e:75:fa:ab:
46:7a:f8:80:db:cb:3b:e8:8f:19:e4:5d:73:7e:cc:ab:be:a8:
9d:ad:c1:7e:67:87:97:28:75:f5:4d:ca:fa:55:7c:56:b0:97:
39:b7:38:c8:71:e7:10:da:8c:1a:91:0b:35:5d:ae:ba:55:8b:
cf:fc:44:62:c6:c7:ad:43:ce:cf:09:51:0a:e5:f7:16:e2:a3:
d3:03:7e:61:da:1d:39:a2:b0:23:06:cd:0c:4a:51:e4:f6:01:
38:c7:f0:8d:13:23:2d:8b:64:3f:e2:88:02:b7:79:ef:75:94:
1a:76:92:b6:51:ff:3b:a6:b4:2e:ae:28:47:33:6c:bf:e0:06:
72:d5:25:f2:1f:4d:0a:9e:b9:c2:93:9b:b1:0e:53:1b:a8:ee:
b5:5f:40:e2:d7:58:01:d0:50:37:8a:8f:40:06:c9:2d:0e:a1:
00:c5:47:c2:fe:83:6b:f4:a4:1b:ac:62:53:d4:7b:6c:62:30:
f9:8e:4a:85:41:77:22:72:98:56:b6:65:d1:1c:af:66:95:93:
d6:a1:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:46 2025 by rpki-client