Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: ZK4dqiITbZX+GUvY37mkBz2G4WbLf5gihY9U7uLsKAc=
Subject key identifier: F7:2C:14:CD:4D:B3:6E:95:AA:69:12:30:D8:57:75:2C:CC:70:AF:57
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 01995077506C087DC0E75A71BF7DBB4CED9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 1638
Signing time: Tue 16 Sep 2025 03:00:20 +0000
Manifest this update: Tue 16 Sep 2025 03:00:20 +0000
Manifest next update: Wed 17 Sep 2025 03:00:20 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: o8C5i5zNhP06hCvlTPRxg8w7NmUT7cSa7386rR0jvek=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:77:50:6c:08:7d:c0:e7:5a:71:bf:7d:bb:4c:ed:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Sep 16 03:00:20 2025 GMT
Not After : Sep 17 03:00:20 2025 GMT
Subject: CN=f72c14cd4db36e95aa691230d857752ccc70af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:dd:05:71:d2:b8:9f:0f:e2:35:ac:98:0d:
a2:94:23:ab:be:d6:2a:f3:b2:b4:6e:2f:58:47:08:
0d:d3:17:0c:fa:6e:42:0f:b3:46:d3:a8:51:ca:02:
9c:22:19:96:e2:b7:4d:6b:2c:29:b4:20:b2:80:ce:
66:b9:51:8a:98:6c:bd:a5:05:c5:7d:9f:03:e8:66:
95:f0:58:a5:9e:3f:b4:38:6d:f9:43:b6:51:42:ed:
03:fd:15:c0:0b:c9:3d:0d:bd:72:26:2f:15:20:ba:
2c:d3:90:da:c2:27:d2:83:c1:eb:3b:cf:9e:d9:35:
7f:fd:43:27:ee:fc:09:84:a9:df:48:93:61:14:9f:
2a:2a:58:54:eb:4a:b4:0e:6f:9c:21:49:fd:3b:08:
4f:21:26:a3:8f:89:d3:8d:24:d6:a2:6f:11:25:06:
5e:32:05:3e:28:82:72:27:d2:e7:02:3c:3d:e3:23:
c5:15:7d:00:c1:5a:a6:95:15:5a:35:4e:89:8d:d2:
ae:15:b5:78:c9:a0:a6:94:0f:38:5e:84:79:1d:48:
a9:36:84:92:98:00:0a:dc:9b:c0:71:84:76:f8:49:
ff:27:4a:46:d1:c9:e3:9c:46:27:4e:f9:21:c7:fd:
fb:b5:72:ec:57:90:b6:a8:18:f1:84:87:b5:4d:ad:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:14:CD:4D:B3:6E:95:AA:69:12:30:D8:57:75:2C:CC:70:AF:57
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9f:80:3c:7b:7e:47:c4:37:17:a8:39:88:6e:ca:b9:e6:a5:
30:e0:ac:da:1e:9c:22:eb:88:71:72:9e:76:04:c6:43:36:2a:
0c:c5:a7:c0:59:06:f0:9a:34:7a:52:25:73:cf:f2:3b:09:a5:
99:48:8a:f8:5c:0d:62:86:c2:5e:db:6b:cf:48:ff:d3:a8:7d:
7e:80:18:6d:be:06:2d:50:03:86:24:1f:82:b8:c9:1e:11:ae:
34:74:88:67:0b:8f:bd:9d:3d:85:07:ef:b6:ab:67:af:bc:0f:
e8:30:f4:26:7c:12:09:fe:36:15:19:4d:86:76:f9:f4:77:51:
34:b5:95:21:51:70:7f:d7:dd:c8:fa:ce:3c:e6:63:be:a9:a4:
10:ae:fb:c7:1c:4b:f5:57:0c:a8:e6:e5:5a:b6:11:3a:31:90:
f5:fd:7a:32:03:5e:bd:4d:c7:52:d4:a4:58:e1:38:05:0e:2e:
a9:86:ee:1e:c6:47:dc:ef:c9:e0:1e:3c:ac:cd:83:6d:48:3a:
7a:09:f7:34:a1:80:58:6b:a0:b7:63:31:30:4a:c2:46:e0:21:
2f:8f:46:bc:45:0e:b5:a4:6f:3d:e8:af:b2:9a:61:a8:9d:fd:
17:9d:14:25:66:ab:85:27:9b:aa:9e:19:e3:71:6b:db:ce:e3:
3c:87:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:25:32 2025 by rpki-client