Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: cmd9NM7zEZXoErb19GTeGcNCmiFXTKOO+ibKy1tKBoo=
Subject key identifier: D6:50:87:12:BD:11:C7:CA:B6:92:9A:C3:AC:C0:E3:AE:88:C5:98:10
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 0199172D2A401D4C54DF1FA030816323DCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 00:00:59 +0000
Manifest this update: Fri 05 Sep 2025 00:00:59 +0000
Manifest next update: Sat 06 Sep 2025 00:00:59 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: d1jTfCpMk24rE+MPdhlyIePgIagPRZK0b3iU68pzLRY=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:2a:40:1d:4c:54:df:1f:a0:30:81:63:23:dc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Sep 5 00:00:59 2025 GMT
Not After : Sep 6 00:00:59 2025 GMT
Subject: CN=d6508712bd11c7cab6929ac3acc0e3ae88c59810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:ca:cb:b5:03:ef:f5:d3:60:cf:9c:84:94:
9a:7d:cc:45:7e:93:0e:f8:e5:d7:54:1f:d0:84:ea:
3d:16:89:28:d3:32:20:b1:b1:e1:de:c7:9f:2f:83:
1b:0c:45:80:68:dc:dc:2a:8a:1e:37:11:95:eb:77:
f5:d3:24:b5:8d:fd:02:ff:38:c9:de:38:02:f2:91:
07:21:a5:3f:47:73:1e:e0:47:cd:d9:45:71:74:40:
88:76:72:6e:87:d0:ff:73:fe:8e:cb:88:a4:fb:b9:
58:65:3f:17:69:7d:cf:99:dd:aa:1b:6e:7b:84:c6:
ef:f0:4f:b3:41:4f:7d:f0:09:b9:34:aa:8b:47:44:
46:31:77:1e:05:e0:04:f1:f8:81:8f:f8:23:26:a2:
39:23:ed:ad:39:9a:05:64:13:32:28:77:00:56:e9:
9c:73:a8:05:68:c7:67:79:25:5d:89:37:73:b2:30:
97:8f:d1:b8:83:7c:f3:00:5a:d1:4e:9b:78:29:43:
dd:bd:28:66:44:12:d3:41:e6:8b:26:63:62:19:13:
ef:24:85:9c:3a:d5:40:a6:27:be:06:87:e4:67:c4:
d0:fb:4c:7c:bc:fc:8d:41:36:10:27:ee:74:40:1a:
2d:a2:4c:e1:14:41:25:27:86:8d:a5:42:12:4a:15:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:87:12:BD:11:C7:CA:B6:92:9A:C3:AC:C0:E3:AE:88:C5:98:10
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:8f:f0:6d:6c:9f:b7:5c:cc:d5:45:0f:0f:74:a0:10:37:
d3:30:b8:0a:c1:de:ac:ab:59:b6:73:c4:21:a5:db:27:20:f3:
ce:78:4c:0c:a1:32:56:b8:5e:82:53:96:70:47:33:14:e5:69:
3b:b4:e3:90:df:61:6e:63:46:b4:ab:e7:46:63:0e:3c:30:b0:
13:c3:98:8a:ff:99:e9:47:51:ab:0d:0d:d1:02:6b:36:54:35:
8b:d3:34:9d:45:37:6a:b4:87:dc:ad:49:86:af:26:b5:6c:6c:
3e:74:4f:26:6f:bc:26:d8:35:6d:83:4e:d6:3e:ae:f4:47:71:
eb:04:94:4f:a0:79:b9:73:70:c1:98:36:32:ee:3f:4a:16:6f:
6f:b4:99:ea:21:20:de:77:b5:5f:d6:83:e3:a5:3a:70:9b:85:
97:41:a0:05:fc:23:bc:2a:de:04:a3:21:61:2c:6e:e1:d8:a8:
a6:be:d6:54:a1:b2:a0:06:0e:3c:3b:7c:7a:48:ae:40:14:74:
b1:dd:37:81:1a:e4:97:76:7a:33:fb:3c:21:d9:2c:70:dc:b5:
8c:57:68:06:44:2a:eb:d2:ad:12:5f:07:45:01:f5:bd:b1:9d:
42:44:e2:51:d0:0b:b9:d6:fe:fd:26:2b:d0:bb:d0:09:3f:31:
0f:43:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:32 2025 by rpki-client