Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: c254wdUpSWmCmoVh1fti4cVLu2Kt9OMmEwn88cjyBd4=
Subject key identifier: 5E:F1:3B:CB:85:73:A3:7D:0E:88:9D:9F:0A:17:E5:CF:8A:06:2C:80
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 0197B7455113E02A00BC010E0141B5A1A076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0D18
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: lZWlbniJ8sa+hScAY5ELTY5SWqpNT0nG2uBdl5QhjSU=)
3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:51:13:e0:2a:00:bc:01:0e:01:41:b5:a1:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=5ef13bcb8573a37d0e889d9f0a17e5cf8a062c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:bf:6b:43:f5:a6:de:cc:75:b9:cf:be:46:
a7:23:42:eb:63:81:7e:34:1c:12:94:37:08:35:f6:
26:ec:f1:6e:e4:a3:71:dd:2b:f0:5d:d8:92:26:41:
4b:ab:96:76:62:a2:bb:ed:73:a1:86:ec:ea:ba:61:
bb:27:9e:03:0a:7d:76:41:fa:eb:1a:e6:b3:40:69:
f6:49:45:24:4f:8b:16:f4:cf:19:2d:12:66:76:71:
f0:44:d9:2e:a8:0c:4b:d4:b4:7c:7f:f1:0a:51:bb:
52:60:ef:78:b1:b5:7c:1e:7e:71:ff:a4:c3:9f:23:
b3:a2:9e:92:aa:81:eb:94:57:0b:ab:b0:58:31:d8:
17:31:c9:99:16:41:67:9f:d4:e1:43:09:1e:17:4d:
c3:79:76:00:cf:f0:fb:82:26:7e:12:8b:6a:ce:c0:
c1:5c:b0:19:a7:d7:8e:35:7d:27:2d:49:9a:a3:a4:
8c:bb:7a:df:18:39:c0:13:55:55:6c:6d:fe:9a:75:
2e:0f:60:2a:5b:31:28:88:a5:9d:70:f1:45:31:37:
90:b5:d7:45:e8:aa:6c:50:36:4a:c3:c9:a7:af:f7:
61:85:85:cf:e8:c4:6b:34:3a:66:ac:57:63:04:8d:
fe:e1:4d:79:8f:d0:31:cf:08:dd:10:a0:fb:ea:fb:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:3B:CB:85:73:A3:7D:0E:88:9D:9F:0A:17:E5:CF:8A:06:2C:80
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:5a:5a:9f:40:8e:5f:02:fe:aa:df:59:d9:cc:a9:4c:6f:
2d:7d:c1:3d:7c:dc:a5:04:38:d0:b3:c5:0c:28:e9:06:9d:d7:
07:23:a5:34:4e:d8:4e:4e:f0:9c:3b:05:7d:aa:68:ae:71:b1:
b4:ab:14:4d:41:4b:b4:43:4c:66:64:76:f6:36:75:8d:5b:a9:
ac:14:1d:08:73:09:a7:01:9a:31:64:13:40:35:a6:48:1d:0d:
4c:39:d3:f9:63:a9:03:d9:da:b5:6c:82:40:ea:74:cf:68:61:
0d:31:29:87:b9:9e:17:6e:58:3f:e8:db:89:3e:13:74:ae:45:
0d:b6:3f:be:e9:45:c0:4b:8d:7e:0a:7f:c6:63:23:bd:e8:81:
48:c0:ef:34:35:96:fd:ce:f4:fb:2b:06:7e:a5:c7:30:38:b5:
60:94:04:cc:02:65:0c:81:75:6a:36:f4:8e:20:b0:a2:e0:12:
a8:b9:26:de:3c:e0:5a:cc:7b:d4:3d:a8:66:11:20:67:00:94:
18:44:2e:d9:b4:6c:42:96:14:6d:04:a0:2e:79:e5:c1:c8:b9:
ff:87:8c:dd:02:95:86:96:55:95:6d:d7:b2:cd:a2:7c:ee:5d:
33:ee:d0:43:42:53:d7:22:c5:d8:ba:a6:60:aa:0d:1a:7e:79:
26:9d:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:16 2025 by rpki-client