Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: FRl90afSXSAwXM/DoX3gbuzMPnk/NblIwdrUtHHgy2o=
Subject key identifier: 57:59:F2:E3:FB:12:3A:55:77:22:F4:64:8A:73:27:BA:17:9B:54:FE
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0199288E9D569484F9F8DC4D3E53045960E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0A8C
Signing time: Mon 08 Sep 2025 09:00:58 +0000
Manifest this update: Mon 08 Sep 2025 09:00:58 +0000
Manifest next update: Tue 09 Sep 2025 09:00:58 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: Ez1OqHGYninZtXsZaBcu0CCIt7cOqJzZGZyMVuPLyBQ=)
3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:9d:56:94:84:f9:f8:dc:4d:3e:53:04:59:60:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Sep 8 09:00:58 2025 GMT
Not After : Sep 9 09:00:58 2025 GMT
Subject: CN=5759f2e3fb123a557722f4648a7327ba179b54fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:40:3b:d8:98:f6:0e:62:8d:77:80:81:6e:
de:bf:7c:32:56:1f:8a:ce:56:15:51:f1:80:3a:7d:
d2:f1:52:eb:14:5b:91:96:60:37:80:c0:ff:00:98:
45:00:ab:94:1c:c9:88:da:4b:23:b0:27:97:eb:5a:
4c:71:b2:f5:42:cf:7e:f7:49:09:54:8b:51:45:a9:
63:9b:36:25:3c:3e:f8:07:57:1b:c3:84:86:54:40:
90:b6:ba:0c:1c:04:67:45:31:5f:0d:92:b1:98:aa:
b3:07:5f:ac:98:87:34:bd:14:0a:62:ff:ec:5e:df:
7a:0c:5b:a4:46:ce:0a:4f:67:c9:e1:e4:11:ec:06:
ee:8b:32:6b:ef:35:08:8b:9b:21:ca:6f:87:5c:32:
d6:0f:9c:a1:97:3c:8e:2f:63:b5:35:b6:44:34:ab:
7a:86:d6:bc:9c:d3:0f:40:fe:d7:ba:02:61:0d:d0:
58:76:ba:7e:b2:84:6f:b7:99:75:02:53:87:57:ad:
ce:7b:f7:7c:c2:d5:4b:12:ad:4c:69:37:92:10:8b:
db:ef:99:16:4e:e5:30:18:8c:46:8c:97:38:6a:47:
c0:8f:73:cf:bd:e9:a5:60:66:c1:47:71:75:22:d8:
6c:72:cf:9e:e1:f9:e0:f6:65:0f:1e:ea:b7:46:f2:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:59:F2:E3:FB:12:3A:55:77:22:F4:64:8A:73:27:BA:17:9B:54:FE
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:de:2d:56:f2:c2:51:1e:1b:40:e1:22:be:68:6c:9a:aa:
62:63:34:0c:07:8c:4f:80:04:b2:43:7b:9f:ce:9c:89:05:69:
d9:80:6d:b2:86:99:ff:29:b1:eb:f4:ae:3d:23:e0:85:60:c2:
38:a6:b1:fa:82:11:75:90:b3:fe:52:16:7f:94:b1:18:5f:c9:
34:a7:73:75:62:1e:7a:f5:b4:9b:a4:3a:2b:7b:ec:81:89:38:
59:00:34:33:f8:f8:87:2d:6e:7e:9b:43:7f:f5:d8:0e:c9:93:
40:81:5a:87:e2:17:b5:5c:64:7f:7d:5e:e4:e7:25:b5:6b:a1:
0d:7f:ba:0e:ca:c6:aa:b6:90:00:ea:12:41:a9:76:6b:ad:08:
72:19:6a:c6:8e:2c:f5:31:d9:99:6f:fb:13:a0:31:0c:d1:52:
01:17:6b:dc:a2:8f:ee:2b:61:ff:48:6c:fa:5c:1c:4e:4f:68:
cf:5a:21:3f:2c:9a:74:b5:87:29:62:67:1b:9d:56:d3:dc:e9:
17:04:88:c1:f6:d3:28:75:76:7f:e2:bb:5e:4a:2b:b3:25:97:
28:61:fc:f8:18:6d:a9:92:d5:87:7a:ad:57:4e:a3:4f:6f:12:
8c:5a:ff:20:e7:32:f3:79:0b:df:42:97:1e:62:f9:a8:f8:04:
27:99:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:21:07 2025 by rpki-client