Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: mVeyRE5+dnBkpL7zLrxYolATI1yUO+NvuNhCeOyUgPI=
Subject key identifier: 6E:B1:F4:3B:2C:7C:54:94:8E:EB:1F:C0:EF:C2:46:8E:67:CF:26:91
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 0196AA9E9CFC2566867D033E56A9571DB7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0562
Signing time: Wed 07 May 2025 12:00:43 +0000
Manifest this update: Wed 07 May 2025 12:00:43 +0000
Manifest next update: Thu 08 May 2025 12:00:43 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: O8UWt/yEHNb8pp8XfF0AuBv0g4QdBPHEBI3KbRLdX5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:9c:fc:25:66:86:7d:03:3e:56:a9:57:1d:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: May 7 12:00:43 2025 GMT
Not After : May 8 12:00:43 2025 GMT
Subject: CN=6eb1f43b2c7c54948eeb1fc0efc2468e67cf2691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:24:02:a3:5a:c5:2b:96:42:70:c9:ea:b3:
51:38:57:eb:f8:af:50:4b:62:d2:55:18:70:4e:c3:
f8:ca:a6:0f:b4:ee:82:f9:6b:9a:0d:fd:d1:55:a6:
b5:08:1a:09:a7:30:84:e2:35:99:8c:f4:0a:07:fd:
70:26:9e:dd:d5:d8:41:b9:c3:2d:c6:e9:b3:cc:0e:
d9:b8:84:d6:ce:8a:ae:b9:69:08:ba:1e:56:99:b4:
11:35:4f:6d:7d:7a:04:28:76:05:e2:25:1d:cb:42:
46:10:df:1c:17:8e:be:2b:4c:05:17:a5:f0:35:55:
db:fe:f3:43:47:ca:3e:d1:5b:2e:bb:af:11:cd:06:
5f:8a:f5:67:88:39:e4:0c:e8:7b:34:f0:5d:6f:2f:
1c:42:4d:e9:ec:c4:74:9a:92:8d:d9:24:44:de:a6:
3f:62:a2:e7:10:52:78:60:0d:ce:63:ad:cf:e5:10:
a7:96:01:29:8d:27:0a:ef:be:da:ee:bd:7b:a1:e9:
d7:05:c1:1e:b3:2d:68:20:f5:cc:65:f8:46:2f:a8:
7a:4c:8d:64:83:22:7c:a4:62:b2:8c:8e:d9:47:91:
7b:e7:8b:a9:5f:bb:0d:ca:2a:65:c0:d1:46:40:3f:
f2:70:78:74:12:84:7c:d4:b8:e0:74:4b:3c:82:91:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:F4:3B:2C:7C:54:94:8E:EB:1F:C0:EF:C2:46:8E:67:CF:26:91
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:fb:e1:1b:4e:af:f6:60:f3:c8:e2:b2:28:37:9a:e3:86:
10:ba:67:ec:eb:41:d7:b4:57:0b:af:92:5c:24:2d:5e:96:2d:
5c:de:05:a4:31:c5:7b:be:bb:40:09:c9:ac:98:5b:1b:95:05:
24:62:56:bd:1f:c1:a5:0e:e5:b5:c9:d3:74:4b:56:a7:b3:95:
00:cb:a5:29:58:7b:5c:bf:73:8e:3f:7d:21:d8:cc:9e:7b:82:
e0:eb:36:bb:75:c0:24:ee:f8:57:00:41:a6:82:cc:db:b3:a3:
bb:da:18:22:8a:41:a5:a6:6b:a1:91:55:83:f6:96:fb:40:db:
43:11:2a:75:b2:5e:22:ff:8e:ef:30:3c:f2:40:6b:74:34:b5:
23:95:cc:19:9e:ec:da:1e:29:d7:69:6c:bb:45:37:0a:ea:31:
8e:f2:16:ac:ea:15:ab:b8:6c:47:c4:c3:46:5a:ea:34:12:1d:
8a:b1:a3:93:e3:02:b5:d7:20:b5:61:ee:7c:f1:f1:00:ff:f8:
23:30:e5:ec:61:c4:92:33:7d:60:47:a8:dc:c4:00:c5:ae:f7:
7a:85:7a:6f:de:ee:5c:c5:ae:31:95:7e:97:23:9e:7a:51:9b:
ea:0d:4b:18:3a:fc:69:4b:7c:3d:61:09:ea:56:cf:0e:a4:8a:
ed:5f:23:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:05 2025 by rpki-client