Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: QfgEVHld1qLO0WHvvsESWGNXfT9azMpumLdb3mTqwaQ=
Subject key identifier: 61:13:B3:25:1B:76:D3:EF:6D:BF:DE:4B:5C:9A:C0:DE:7D:63:D9:B6
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 0197B74565342C42081A2DB5177B4389D31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: kbIhciRDOUqWseTI+Tm6qy5zn9Dw09bsg3Kv4Nb7w7o=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:65:34:2c:42:08:1a:2d:b5:17:7b:43:89:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=6113b3251b76d3ef6dbfde4b5c9ac0de7d63d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:1c:1c:30:4f:23:98:1b:d4:98:5e:67:cf:
45:08:24:2b:0e:b0:21:72:cf:8e:a8:60:2a:9a:5b:
83:c6:cb:6f:48:c5:59:fd:e0:78:62:96:18:56:f5:
a1:e0:4d:83:24:9d:3d:1b:70:fd:ba:48:9e:f4:6d:
cf:8d:82:77:85:44:3e:83:a3:af:c6:14:8e:53:55:
c2:66:25:75:7e:eb:c8:85:2a:9d:c1:e4:90:e0:c4:
da:bd:05:c4:12:48:67:23:89:64:9b:0e:20:a3:ed:
0b:36:a7:14:a1:34:1a:5a:16:48:13:ef:77:20:26:
52:be:91:95:31:47:87:57:4c:0d:0c:c3:c5:4d:1c:
29:f2:49:ee:cc:4c:70:b5:37:ce:fc:7b:7b:6a:7d:
71:d5:69:10:9f:07:97:d9:8b:9b:ed:9c:dd:bd:33:
56:e1:35:13:23:a6:53:5e:cb:56:2b:01:e3:4b:a0:
6a:6e:6a:6b:25:0d:a9:38:e7:9b:97:7f:ac:89:fc:
08:c7:a4:e2:0d:ce:17:94:03:f4:cc:39:06:2e:4b:
de:3b:19:cd:0b:21:71:12:cd:57:1b:15:8c:dd:f9:
78:f0:56:91:02:b6:22:50:0e:9e:cb:13:e4:6e:fd:
2b:44:7b:b3:06:56:d1:f3:64:b7:f1:d5:11:e7:52:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:B3:25:1B:76:D3:EF:6D:BF:DE:4B:5C:9A:C0:DE:7D:63:D9:B6
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:77:9c:8b:74:67:7e:40:ae:c4:bd:d8:60:b2:5c:68:d0:
e7:e7:29:4d:9f:f1:61:11:74:c7:a2:d2:84:9c:b0:85:37:ac:
ac:b5:5b:16:77:ba:b4:34:6b:a3:9f:42:79:f2:7c:77:39:ca:
3e:68:da:b3:48:a6:a2:a9:96:2b:11:34:2d:c2:ed:12:c4:94:
a3:ce:25:e2:20:42:a7:8b:e3:f3:4c:8e:26:b8:79:98:d2:f6:
b5:1c:a4:23:78:66:fb:e0:d0:99:c7:e9:04:b6:43:47:16:5c:
ff:c7:97:90:c8:1c:d4:aa:d1:cd:19:c9:85:78:d1:ea:25:8f:
9a:77:4a:4b:03:ff:b3:7d:fe:2b:45:94:21:f3:32:ab:70:36:
7b:32:63:dc:58:5a:80:d1:e7:04:5f:d2:af:3a:ec:db:77:f5:
e8:33:a5:b7:42:12:0d:67:83:f5:9f:c3:b5:5d:b8:11:36:7e:
d2:86:70:f0:af:65:21:6c:d6:02:37:6f:4e:84:e5:a7:59:76:
6e:b0:59:d5:23:ad:6c:36:ad:29:09:da:65:32:1d:34:9e:7f:
52:17:de:c2:e2:da:50:32:15:98:b6:84:6a:69:53:9e:72:08:
5d:38:08:de:66:b3:cc:e8:9e:cd:cd:d7:ef:a5:87:10:a6:17:
8a:1b:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:35:59 2025 by rpki-client