Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: Oh/8A9ye4BTWNa3N5EVbiEFbraHUazVmYBMrb5bB09U=
Subject key identifier: 10:D8:07:77:67:B0:86:D6:87:3C:49:18:3F:9E:6B:F7:E9:DF:AF:47
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 019922FAE78093115A67200A232F9EEBE1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 142D
Signing time: Sun 07 Sep 2025 07:01:32 +0000
Manifest this update: Sun 07 Sep 2025 07:01:32 +0000
Manifest next update: Mon 08 Sep 2025 07:01:32 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: BH4zALFrHq597+8d8/9uQumxg3U00wNlJ/fl66dn56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e7:80:93:11:5a:67:20:0a:23:2f:9e:eb:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Sep 7 07:01:32 2025 GMT
Not After : Sep 8 07:01:32 2025 GMT
Subject: CN=10d8077767b086d6873c49183f9e6bf7e9dfaf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:37:59:b3:16:0b:f4:9b:78:41:16:9d:a7:
fb:47:b4:47:30:0e:09:fc:44:0c:8e:e1:ec:12:6b:
e0:e4:bd:5f:39:d4:5c:4c:f0:4f:de:c5:c0:cd:a0:
f0:7a:9b:79:1b:d2:c1:c9:8e:dc:6b:da:05:70:0d:
aa:fa:5d:7d:51:2a:fb:df:1a:d1:e4:98:80:c6:5e:
b7:1e:65:4a:af:46:22:8c:1f:05:de:63:90:10:9a:
74:16:ea:8a:e6:09:62:92:6c:43:f0:33:39:a6:d3:
74:28:67:f1:b5:81:fc:b6:11:84:36:4f:5f:39:e3:
32:e6:08:17:ff:41:7d:b3:cc:9b:02:d8:78:c6:56:
ec:35:e5:71:42:69:da:81:06:a9:ea:64:11:22:00:
6e:0b:b1:1b:b5:5a:22:87:e4:e5:82:c3:87:fa:fa:
13:eb:2b:73:a9:72:97:40:fd:a7:ce:8b:80:10:3b:
e2:10:b6:23:19:1e:f5:55:e3:e5:af:f7:5a:da:8d:
ed:97:d1:cd:bc:ea:4e:64:de:bf:d7:b6:bd:6b:1b:
10:6d:11:f3:54:7b:84:82:4f:af:95:da:4e:01:96:
f1:ce:1f:d2:96:17:d5:d6:09:d1:41:29:7a:8f:88:
07:04:ab:05:78:60:94:92:3b:e8:a9:58:58:55:7f:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:07:77:67:B0:86:D6:87:3C:49:18:3F:9E:6B:F7:E9:DF:AF:47
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:28:4d:89:fb:ca:3c:95:35:3d:79:d8:fb:0f:b4:2d:77:2d:
62:06:d1:87:5d:3e:ef:d5:65:31:c3:10:34:60:cb:a7:ba:b7:
67:02:50:7c:17:ba:b0:11:15:f4:54:54:19:e2:1f:2f:c2:31:
9c:f0:91:c2:67:4a:b5:4c:54:16:69:c9:86:35:f1:2f:22:9d:
65:30:24:a5:9e:b4:a1:c2:d2:df:8d:05:96:44:df:ec:f1:2d:
14:b7:24:8f:92:eb:d6:7c:01:2b:da:f8:0e:01:19:74:88:b6:
3e:72:d4:3a:e2:d9:be:ca:e6:2f:82:00:e4:bd:97:9d:2f:1a:
da:f9:df:a5:7e:e4:dc:a4:3e:a6:1c:43:e3:d3:e1:27:f2:9a:
99:0b:12:d2:db:04:e1:b7:59:61:02:3d:3b:2d:e8:0f:8c:ec:
9e:ae:a4:15:4a:03:a6:6a:33:e1:1b:4b:6a:b5:a5:e7:ec:63:
7e:b8:a3:8d:9e:bf:85:0f:3b:d8:1c:f7:37:86:a6:84:49:ab:
1d:c4:5f:f2:a6:ae:81:6c:4d:3d:34:92:2f:95:58:3e:ae:0b:
2c:19:ed:37:db:ae:f0:2c:b6:22:98:7d:b2:f7:27:15:67:28:
27:fb:9f:b3:56:6b:b6:5b:d9:29:b3:83:ab:97:53:21:1f:c0:
20:d3:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:22 2025 by rpki-client