Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: rQeIHqjbh5oP5QPz1pvzFuMkyMUPyO/yzz7gJywviyk=
Subject key identifier: BC:E7:02:95:48:73:43:74:12:7A:66:3D:98:19:2E:6B:C5:5C:E3:7F
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 0197B6A1179EDE8D07564E2B0F1840702452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: h89+Mf/RJrQk3uz9HLsicK2yAgtxm/Fxr+IOjJUPmT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:17:9e:de:8d:07:56:4e:2b:0f:18:40:70:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=bce7029548734374127a663d98192e6bc55ce37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:8a:fb:33:19:94:dd:41:81:c0:b2:7e:c7:
b8:1f:6a:b2:2f:81:2f:8c:c6:8c:92:4a:21:8c:8c:
db:64:a9:b8:31:35:0d:e9:66:d6:6f:33:2f:66:4e:
73:5e:c6:09:c7:89:54:1e:cb:4f:75:e3:98:68:81:
0a:48:ab:ae:56:3d:94:17:79:40:80:ac:8a:69:b7:
21:8e:0a:70:d5:f5:ec:e9:17:c5:b7:d3:a1:2b:86:
c9:1c:16:03:26:e1:61:de:df:21:f3:fd:c6:36:ce:
7e:91:4a:31:0a:a0:f7:2f:da:fe:c2:42:81:dd:5c:
b0:30:43:c9:ae:66:47:90:99:fe:ce:13:85:ea:be:
d1:2a:77:c6:a5:f0:be:e9:c2:18:94:16:f5:f7:89:
f3:fc:50:78:33:47:ff:89:69:aa:72:ab:fc:b4:56:
2f:2e:a7:3e:b2:01:41:fd:4e:1d:ce:22:a4:3d:ec:
96:9e:b9:43:20:ea:59:19:49:55:68:87:e8:06:90:
27:d8:a4:4d:7a:09:f8:d2:6e:99:3a:d2:9c:3e:51:
28:88:a1:dc:1d:e6:9b:3e:d9:b4:1b:7b:c1:e6:d2:
58:c3:08:a0:f9:0b:0d:ae:9b:95:b3:e0:29:cb:15:
9d:a1:01:e1:b0:c8:e7:5d:39:3a:b7:ed:09:49:ee:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:02:95:48:73:43:74:12:7A:66:3D:98:19:2E:6B:C5:5C:E3:7F
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:96:33:9f:8c:f2:6c:ed:63:54:c9:54:96:70:84:0d:03:
9d:4b:bb:6e:3d:d9:cb:e9:a4:fc:7e:2c:47:ba:62:2b:3d:59:
48:01:fc:fd:93:b2:a5:54:af:f0:48:dc:50:36:ee:a7:9f:6f:
90:71:01:b7:de:9e:0a:24:7b:3c:b9:5f:cf:22:87:cf:34:f0:
57:27:2a:2e:86:5b:83:8b:4b:76:f1:47:59:3b:1f:69:eb:6a:
a4:a3:58:98:dd:22:65:6e:2e:47:fd:d6:fd:eb:72:d1:b7:9e:
29:0c:36:6f:d0:a5:42:9f:cf:b8:e5:0d:18:df:e5:f9:29:a7:
dd:15:6e:59:19:6e:0e:3d:e9:e5:95:d7:0f:bc:81:50:f5:80:
54:6f:2e:b2:a4:61:de:c3:57:90:00:4f:11:23:d5:d0:80:2c:
24:30:aa:44:da:9f:67:6b:c8:80:23:e8:e8:9e:44:c3:df:38:
25:53:ae:10:1b:af:2e:5b:1a:0f:40:37:67:b8:33:8c:e3:96:
8d:d8:9f:c5:12:ed:de:ec:2d:ba:ba:d7:32:32:3e:9a:62:7b:
14:4e:32:82:f1:e9:1e:7c:d7:90:8b:b3:0d:da:b5:ab:1c:88:
82:1a:7a:bf:b4:da:8c:b5:47:33:c9:d2:6d:a4:f7:dc:70:5b:
41:60:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:30 2025 by rpki-client