Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: 7STLyycEzCpGYxdPJOYFhBQWMaGiWgMSPeMSOGXRnbM=
Subject key identifier: 4A:80:D8:EA:A7:82:50:55:95:1B:08:70:8D:27:A4:1D:3C:85:1E:E7
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 0197B70F2ECB2A3303749DA50EA0269C9633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0AE0
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: hAKY8cbncZGFY3dDyPGKKFDiP4Gu2GPD0LlWsbMpuaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2e:cb:2a:33:03:74:9d:a5:0e:a0:26:9c:96:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=4a80d8eaa7825055951b08708d27a41d3c851ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:89:ea:27:92:52:fc:b3:65:56:f3:5e:77:
5f:56:39:5f:65:6a:1c:4b:e5:95:fc:11:0b:81:bf:
42:f4:68:43:aa:c4:be:7b:e7:b0:ee:38:9e:fb:fa:
ff:8a:e5:f8:d7:3b:fa:0e:b4:31:4c:54:34:d1:01:
ca:7b:7b:02:cb:d4:dd:4d:d3:ee:4a:0d:f3:56:e3:
a2:95:a2:c4:b3:0b:b9:b6:65:0e:bd:25:14:8a:a6:
7e:b4:e8:06:5d:da:62:54:27:24:a5:55:3c:94:ae:
11:21:fa:5b:6a:59:09:15:43:fc:74:54:f1:0e:97:
a1:0c:98:2d:6f:f8:b0:c5:3d:99:7a:bb:0e:5d:1f:
cf:20:1b:b6:ee:41:4a:85:66:1c:1c:9a:d0:24:b3:
6a:4c:c8:27:72:22:dd:98:64:e2:b1:e3:3c:60:a1:
47:92:ba:90:ea:5c:3c:99:e0:f2:ea:17:90:e2:12:
0b:45:cf:40:cd:49:03:22:1a:f4:23:25:7e:e7:8e:
fa:92:95:bb:f2:6a:9a:c6:31:85:ed:9c:e5:f2:66:
53:f7:05:6b:24:75:51:1c:e4:ef:2c:40:c9:7d:63:
f6:18:25:71:ec:8b:7d:74:b5:cc:91:ea:0d:fe:9b:
ee:7e:90:13:72:f5:18:22:82:bd:c4:b9:38:65:c4:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:D8:EA:A7:82:50:55:95:1B:08:70:8D:27:A4:1D:3C:85:1E:E7
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:f6:35:eb:b7:93:ee:15:e0:9c:78:72:14:3c:54:f9:5a:
59:63:33:b7:98:1d:bc:9f:c1:fc:12:08:72:63:85:fa:98:a2:
40:c6:fe:d3:32:7a:bf:59:89:20:1b:14:cd:1d:6b:74:b0:5b:
74:54:9c:bf:53:d9:56:94:28:fb:1b:d2:74:e8:7f:b5:e2:4a:
7a:db:ed:79:b4:8b:03:33:b9:a2:69:2d:f1:a8:8e:fc:dc:83:
c4:e9:69:4b:e9:6e:c9:79:84:34:bf:72:34:a2:a8:3e:4d:7e:
69:2d:1d:a4:dc:4a:a9:53:90:d9:30:ea:69:f4:22:8a:ff:f6:
6c:9a:21:5c:08:38:db:db:9d:ee:f1:56:6e:36:e3:b7:10:5d:
32:99:5d:fb:ce:b8:3f:db:ef:66:84:7e:47:30:36:bf:cb:ae:
d8:e5:f4:6b:95:72:33:97:3a:ab:46:4b:c9:82:5d:09:1f:fc:
23:93:54:5f:c2:d0:f6:89:72:2a:0a:14:e2:b5:be:06:e9:5b:
f3:ec:c6:2b:f2:b8:56:88:d2:9b:ad:bd:35:91:de:20:11:fc:
9d:e5:ca:7c:24:fb:86:8c:22:cc:2a:b3:b5:9c:78:6a:7e:6b:
81:8a:42:2f:be:0f:ea:6f:18:49:4e:52:e1:45:35:c0:52:cd:
8a:b1:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:27 2025 by rpki-client