Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
File: K5vsAhH2Hq8RnOstQMWg_jqowqA.mft (raw, json)
Hash identifier: fnKXxB1ec7DOOnqTRGX1SQnSotkhr+veFZqtUh8GNL0=
Subject key identifier: 71:32:6C:7E:A6:67:D8:1C:8C:8B:A3:AD:DC:5D:1D:13:BD:B9:8D:48
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 0197B88EFD529DE596187042C56560857C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
Manifest number: 0C1B
Signing time: Sat 28 Jun 2025 22:01:08 +0000
Manifest this update: Sat 28 Jun 2025 22:01:08 +0000
Manifest next update: Sun 29 Jun 2025 22:01:08 +0000
Files and hashes: 1: K5vsAhH2Hq8RnOstQMWg_jqowqA.crl (hash: kJ0t+6rowA6tXS9rkQr4HUw219Xln1g82lW7QcFIVKA=)
2: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (hash: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=)
3: _JzEQSr5OZqDWs8nTia735Fx54o.roa (hash: n/vl1VjbI5NvAsfCuLgcPjpEvc0iKrJUQhClyjm4L3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fd:52:9d:e5:96:18:70:42:c5:65:60:85:7c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Jun 28 22:01:08 2025 GMT
Not After : Jun 29 22:01:08 2025 GMT
Subject: CN=71326c7ea667d81c8c8ba3addc5d1d13bdb98d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:bd:7c:6c:26:50:2c:e5:0c:90:e0:32:f9:
92:03:c9:3b:fc:ac:07:67:cd:d2:5e:15:5b:5f:ea:
89:de:e1:a8:5e:91:b4:94:cd:12:a0:eb:a8:4a:ca:
fa:52:f5:35:3a:5c:8b:a5:c5:4b:c8:43:e5:a8:bd:
21:06:d0:f6:94:ab:39:74:32:04:13:9f:80:2e:5b:
82:cf:c6:80:7a:72:c9:62:68:9a:2b:3d:93:2a:64:
d8:48:8a:6a:b1:1c:78:6f:e7:29:4c:33:0c:3f:7e:
e9:52:6a:e0:bc:0b:36:4a:8e:d0:05:45:db:f1:33:
70:e8:fd:7b:d7:31:8d:bc:46:c1:fa:f1:72:50:1e:
3c:47:95:fb:1e:f4:de:bc:3d:eb:58:bc:64:c6:8e:
d5:b6:a6:a5:04:95:46:63:5b:da:d2:43:7d:a1:9a:
9e:d7:d3:e4:54:7f:0a:eb:39:dd:50:8c:c1:84:c6:
26:92:8c:a1:57:76:6e:06:5d:3e:b9:4c:40:18:0a:
34:dd:23:19:b4:51:da:35:01:f6:28:fc:2f:1f:c2:
ca:5f:80:04:4f:0a:3f:04:3f:54:87:e3:14:ec:21:
22:69:e5:f7:42:fc:8c:ce:1c:2f:75:61:d5:04:74:
d6:cf:d4:17:12:b1:ec:40:29:63:ba:89:4a:d8:d5:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:32:6C:7E:A6:67:D8:1C:8C:8B:A3:AD:DC:5D:1D:13:BD:B9:8D:48
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:be:08:a6:ff:d8:a0:47:27:a6:2e:63:6d:74:e2:7f:a5:db:
99:78:c0:7d:28:75:54:55:43:3c:f0:f4:d2:b2:ec:b3:aa:21:
05:32:38:e8:45:ce:3a:a8:e7:6d:37:cb:e5:46:2d:7d:ed:2b:
c5:a9:ba:af:40:6b:0c:3b:06:65:7d:87:0c:dd:c6:62:b3:ab:
83:5b:64:db:2a:c2:aa:8d:54:76:be:81:6a:97:64:c2:b9:94:
1f:5d:8c:24:e9:49:35:14:29:0e:a7:d3:f9:14:c6:8d:e4:1c:
1f:30:8e:34:23:1d:77:d0:a1:97:f3:9e:c5:86:c4:85:31:6f:
b6:14:82:58:52:73:1f:18:ac:29:25:05:f1:8c:34:fb:6a:ac:
31:03:4c:f6:1c:b1:b0:03:09:ca:6d:96:ce:75:55:95:ce:51:
50:30:1c:de:b1:16:d6:37:73:37:1d:1d:cf:ba:ae:69:12:75:
bc:d7:b1:74:70:a1:26:52:c2:d2:e3:97:22:75:e5:ff:c5:d7:
e6:36:d7:59:b3:0b:b1:33:c3:72:0f:75:40:f5:06:54:37:c5:
b3:ec:4b:61:79:d1:2f:8c:7b:bf:20:62:da:04:4a:03:b6:3e:
99:81:60:c7:d4:f6:e2:ee:c9:e4:8a:a3:f6:ea:9a:dd:67:87:
6d:e8:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:03 2025 by rpki-client