Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: L0xJ4UEahpKAcD58uK9V9S6DkuvFz5abZlHKkqQoBRY=
Subject key identifier: 87:FC:57:87:78:1A:7B:D1:42:D3:E3:2D:EC:2D:1B:6F:98:D8:32:0A
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 0199277D0697A6B385F93474D13E8E654925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0568
Signing time: Mon 08 Sep 2025 04:02:09 +0000
Manifest this update: Mon 08 Sep 2025 04:02:09 +0000
Manifest next update: Tue 09 Sep 2025 04:02:09 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: Ry6fAE2pfBKWC1qBywkSvINeYjWia3yU3ZAh72cE8T4=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:06:97:a6:b3:85:f9:34:74:d1:3e:8e:65:49:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Sep 8 04:02:09 2025 GMT
Not After : Sep 9 04:02:09 2025 GMT
Subject: CN=87fc5787781a7bd142d3e32dec2d1b6f98d8320a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:7a:fa:a6:a2:e9:2a:de:a3:3f:ca:4f:9e:
8c:52:50:68:d7:1d:60:c9:05:61:71:89:ca:56:3a:
f5:e1:3c:b5:e9:62:2c:4f:a6:8f:82:01:06:44:ba:
68:40:15:81:c5:6b:fc:2f:ac:f0:e3:25:2d:23:1e:
c2:91:8e:51:27:54:45:5d:13:94:2e:34:95:b9:28:
70:6a:a6:ae:87:85:11:0d:90:d8:a8:14:df:0d:56:
cd:86:00:45:53:a9:56:e4:5d:f9:bc:a9:05:52:37:
0c:e2:57:49:dd:48:ca:53:38:68:4f:47:b6:c5:0b:
e3:1f:11:96:d3:b0:27:fb:04:7c:e6:f1:bf:ce:5c:
19:ad:d6:e8:b8:27:f0:cf:14:49:4e:e2:34:c8:da:
df:4c:9b:7a:17:8a:06:06:89:66:99:a7:b5:61:24:
af:79:3a:aa:c6:53:72:d4:9f:ed:b6:c1:4c:a6:b4:
9f:5d:be:35:34:2f:81:4d:b6:69:dd:e5:a6:bb:68:
e2:65:6d:5f:80:e7:70:4c:0b:8e:b6:0b:c6:c2:55:
f5:36:81:8d:d4:20:82:e7:05:b9:7b:b3:1d:55:4c:
5e:26:5b:ae:6d:18:83:e6:8c:e6:45:79:d1:4a:d4:
0c:fd:8f:6a:93:c2:03:88:89:60:ce:84:30:d0:f8:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:57:87:78:1A:7B:D1:42:D3:E3:2D:EC:2D:1B:6F:98:D8:32:0A
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:ee:57:8c:cc:c5:2f:df:05:cb:7c:55:78:03:f2:a9:7d:
5d:cd:70:a9:ea:61:fd:37:db:bd:4b:70:fa:44:40:28:ce:de:
35:9a:95:c6:d2:bf:c5:ab:a1:1a:20:68:22:6e:e5:f5:a9:aa:
66:f1:bf:f9:f5:ac:29:fa:bb:f2:37:ee:3a:80:b7:6a:09:ea:
54:0b:33:7c:11:5d:a1:58:d3:a0:51:3f:3d:25:f6:55:9e:9e:
b9:3c:a5:75:91:72:fd:fc:58:bd:29:ba:91:5c:94:7d:f2:f7:
f4:58:34:d4:f8:79:60:36:bf:b2:af:30:3d:51:50:7d:04:bd:
dd:12:21:1c:df:85:ca:af:91:b6:ea:15:db:a4:ce:2b:d6:c0:
81:85:3a:a5:f6:24:c5:23:00:6f:64:3f:5f:34:0a:af:26:dc:
35:70:6b:73:ef:fe:a6:af:9a:ab:21:64:98:16:b3:88:e4:48:
dd:5c:16:d4:58:fd:76:73:30:b2:12:cf:7c:4e:9e:cb:6e:0a:
5b:76:e4:01:5a:3b:bd:43:29:a8:0c:2b:58:1e:b8:25:f4:ac:
64:8d:65:e0:a1:55:87:47:5e:9e:7a:4f:02:7e:83:6f:03:78:
d6:bd:23:aa:14:39:99:d1:09:2e:96:8a:fd:d3:02:2a:47:25:
ff:52:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:02:06 2025 by rpki-client