Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: XmCBIXfjl6azryMUlU+nJeW9GcPtVcSOkeWP20DOgrs=
Subject key identifier: A7:C3:E1:98:32:F8:FE:FA:FC:6B:98:79:2F:78:D5:BD:0E:9A:1F:68
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 01992CD9671A228862463316F4BE23A4421D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 05FF
Signing time: Tue 09 Sep 2025 05:01:09 +0000
Manifest this update: Tue 09 Sep 2025 05:01:09 +0000
Manifest next update: Wed 10 Sep 2025 05:01:09 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: WetW8+6yrrYOkmXjrQlJnesf7hHZTA1vbqLzqovLA78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:67:1a:22:88:62:46:33:16:f4:be:23:a4:42:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Sep 9 05:01:09 2025 GMT
Not After : Sep 10 05:01:09 2025 GMT
Subject: CN=a7c3e19832f8fefafc6b98792f78d5bd0e9a1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:53:e5:48:71:b3:23:38:c0:20:7f:fc:f8:
c9:1e:7b:37:60:09:8a:5f:16:db:39:7e:ef:e6:05:
cd:e5:e8:7b:c8:7b:9b:69:a1:14:98:c1:52:76:e5:
a6:19:6e:5c:73:77:1c:2b:96:96:0f:83:a3:b3:8b:
3f:6f:e9:eb:a5:4d:05:d5:50:cb:89:fc:5d:4b:c2:
bd:5c:fa:28:a2:e5:8c:4e:5c:fa:c1:09:fb:78:3d:
6a:74:55:a3:9c:74:25:09:aa:9f:ca:0f:2f:92:c2:
ae:0f:01:61:77:e7:01:4b:6c:d2:3c:b4:7f:f4:f2:
c1:ce:0a:2a:96:4d:68:33:a3:14:08:c8:9c:8b:c7:
af:b8:50:47:9b:c2:dd:26:95:bd:c4:b9:92:93:21:
58:db:33:64:df:87:a0:ec:97:fb:67:d3:1f:f4:1a:
fd:cf:b3:0b:7c:25:72:39:75:ea:55:c8:c8:f0:af:
75:08:9c:fc:7b:3d:8a:7b:c6:9b:68:35:ec:88:2b:
e9:85:09:b9:b5:97:35:84:29:6b:15:53:da:7c:f2:
7d:8a:ad:c1:42:98:0e:02:67:82:3c:42:ce:0b:92:
52:d1:90:30:15:00:9f:26:7e:b1:e9:b2:ca:44:37:
8c:a3:a1:2f:cd:cb:a4:35:e1:6d:14:de:21:6e:da:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:E1:98:32:F8:FE:FA:FC:6B:98:79:2F:78:D5:BD:0E:9A:1F:68
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:47:ab:6e:ef:c0:82:8a:48:07:99:9d:1a:41:60:df:62:d2:
e8:5a:83:a6:a2:c8:46:d9:a0:57:e9:08:2f:73:6e:33:d2:29:
91:ba:bf:eb:87:90:d8:a5:82:0e:75:99:67:3f:83:1e:09:ef:
50:ac:f8:be:2a:2a:5c:e2:fe:13:b0:59:5c:cf:ad:55:3b:84:
42:ad:08:ec:d8:2e:3b:17:4b:d5:34:b3:b2:ba:b1:ff:bc:7c:
68:0a:dd:42:a4:cb:7c:ff:0a:64:a6:fa:5b:fa:b9:2a:7e:93:
8e:cb:d5:33:65:c0:bc:fa:77:7e:fc:10:4a:df:dc:45:07:6a:
aa:50:3e:63:cd:6d:e3:08:3c:3d:31:c0:52:0e:49:3d:b0:de:
78:18:bd:81:f7:07:32:5a:4f:e0:44:4c:30:32:10:e0:9d:ac:
46:ea:b3:3b:99:c4:ed:89:09:36:81:98:aa:ef:3e:e5:ae:24:
8f:34:8f:59:ff:65:df:16:65:63:aa:18:95:a0:5b:2a:cd:94:
d3:29:0c:14:d6:14:97:82:94:be:7e:76:08:78:6e:41:cb:81:
71:6a:84:6a:ba:ad:34:dc:82:41:7e:0f:a1:8c:61:8a:39:56:
6d:5b:da:0c:b9:f7:0d:de:09:5b:47:ed:cf:55:dc:f2:d9:e4:
fe:52:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:11 2025 by rpki-client