Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: lBy7m1YGmP/kxTtBNZ82WUgeEzjMWxM1ijgjwjeEerU=
Subject key identifier: 64:90:4E:6E:AC:B5:9C:E2:6C:B2:B0:A6:6B:3D:32:09:A8:1F:D5:AE
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 0199394B7AA6C5202D27FA5F0E82A69FD38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 15:01:11 +0000
Manifest this update: Thu 11 Sep 2025 15:01:11 +0000
Manifest next update: Fri 12 Sep 2025 15:01:11 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: b3+7wD6HJ374EWttzq7EqwsmLG6RP8ffVziidISMILY=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:7a:a6:c5:20:2d:27:fa:5f:0e:82:a6:9f:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Sep 11 15:01:11 2025 GMT
Not After : Sep 12 15:01:11 2025 GMT
Subject: CN=64904e6eacb59ce26cb2b0a66b3d3209a81fd5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:36:e2:a6:61:b5:28:bb:c3:58:25:f4:ab:
75:ce:9f:b8:71:96:49:79:ce:7f:27:62:fa:01:09:
f7:08:24:f2:f9:3f:51:f2:36:4b:b5:d8:4c:51:40:
f0:96:6d:3d:36:12:47:12:35:c4:43:6e:bf:dd:b3:
d4:94:06:f9:18:3e:92:2f:24:36:15:5d:e9:8a:fd:
fc:a1:a5:22:98:b4:54:4c:11:31:78:e2:c3:e9:6e:
69:c6:c7:24:42:d0:c0:25:15:4c:a4:bd:dd:11:b7:
82:19:f7:fe:c3:af:73:66:e4:05:69:81:d6:01:31:
6d:d0:54:09:48:2c:b9:ca:14:7a:1c:68:6d:9f:9e:
3a:fc:0c:24:59:f2:8e:c4:83:57:8c:a2:c8:01:1b:
5f:6c:93:87:a6:8b:9b:51:10:b7:3a:c2:b3:4d:1a:
8b:22:be:21:a4:c6:a7:c7:14:c2:9d:01:38:63:eb:
7d:69:70:b1:83:a7:de:c7:5c:0a:46:bb:6e:3c:be:
5f:52:ba:12:66:09:e5:d0:af:e5:75:cd:1a:a1:7d:
a4:b9:03:53:d4:94:66:cb:38:48:41:22:b5:b3:33:
50:74:fb:85:a6:dd:85:95:53:5b:72:19:36:d0:04:
03:49:29:51:34:e6:c6:bb:23:3e:19:22:d8:9f:09:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:4E:6E:AC:B5:9C:E2:6C:B2:B0:A6:6B:3D:32:09:A8:1F:D5:AE
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:e2:c0:7a:bf:f1:0b:30:41:69:5b:a8:e7:ec:b9:3f:66:
c9:e2:7f:f5:1a:a4:15:49:4f:f8:ab:f1:46:dc:21:d0:14:d0:
8a:4a:12:fb:ad:ae:9f:18:ad:eb:13:fb:f8:ef:8b:d6:b4:8c:
3d:0d:d0:74:1c:91:2f:44:2b:89:19:bf:5f:ef:ad:17:c8:4d:
ea:97:cc:75:0a:63:37:ec:6d:af:ab:5a:5a:fb:5f:5c:02:22:
9a:c0:79:ad:c0:a1:a0:85:4e:71:d8:37:99:93:a4:90:ad:49:
3a:01:70:e8:d4:61:06:e3:c7:e0:13:48:76:57:5f:d2:f1:f2:
d5:69:9b:1c:33:0c:9b:f7:f0:15:eb:09:83:cb:b3:92:34:c6:
7a:ea:a1:d0:9f:4c:94:29:02:84:d7:a5:80:b9:60:6a:dc:2a:
a6:22:fa:c4:45:0c:1c:9b:35:3b:00:df:b1:56:57:40:58:10:
71:d8:1c:42:4c:74:13:50:8c:61:8d:a6:e0:72:e7:e1:f8:6b:
06:9d:f0:56:5a:99:c3:60:61:c1:d4:c2:c4:04:bb:15:a7:fb:
ff:4a:2e:97:15:5b:7a:f7:7e:d2:fc:16:3a:fa:3b:dd:0b:0a:
9f:c2:32:e5:e0:17:9f:2c:f6:d8:da:c9:da:85:49:89:17:0c:
da:04:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 22:28:45 2025 by rpki-client