Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: eT9ytW31KwwEK81Sd2T/Rt3Zc3luTtgr1DlnhZFhzPM=
Subject key identifier: C9:F2:03:77:9A:BA:11:FA:7C:1B:5E:D7:73:95:51:A1:0A:A0:CE:7B
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 0197B7EA83E6A3384D05F9C4BB392BF3DF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 1371
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: f8yUS0awTMSlLNLFt+sy3YaAqY3UXzGjOLZOLTC8+14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:e6:a3:38:4d:05:f9:c4:bb:39:2b:f3:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=c9f203779aba11fa7c1b5ed7739551a10aa0ce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:60:2b:07:af:39:dd:5e:39:dc:02:6c:73:
7e:2d:d3:df:cb:4b:57:d5:04:c8:3e:4c:91:82:ab:
dc:aa:26:06:90:1a:14:4c:5f:10:a8:11:57:56:e6:
7e:ef:de:10:61:be:4c:b9:bc:54:0c:c0:0f:a1:a3:
f2:a5:b8:2c:66:6e:d9:cd:66:9c:4d:0a:ab:a6:dc:
4e:28:54:ba:b5:ce:12:83:09:70:4c:13:cc:a3:f1:
3f:b3:1b:0b:24:d8:bb:9d:0e:41:73:07:ac:ca:ff:
5a:f5:e7:e5:36:3f:19:62:f4:ed:19:6d:02:76:69:
1f:a1:19:b5:eb:bc:3e:e2:9d:e8:a5:6b:34:34:e7:
c9:ce:c3:4e:e1:0f:b5:6d:01:d4:d1:c7:e8:e0:a9:
6a:98:b1:fa:68:d4:c0:ba:57:e5:7c:24:6a:d0:8d:
c4:aa:78:3c:9f:e3:14:53:70:62:c7:0d:7c:bd:94:
11:d0:01:6f:03:7c:8b:bc:7a:ac:a8:a6:3b:e2:54:
fd:3d:1f:df:99:ab:ed:14:03:aa:b6:3e:27:e8:e5:
47:a3:ce:7c:25:d7:1a:20:79:c5:9a:4a:da:0b:cd:
5b:de:1c:39:e3:c3:44:c3:da:29:6d:91:07:07:4c:
44:47:14:39:5f:c8:48:2d:e3:f5:cb:9c:f7:76:b7:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F2:03:77:9A:BA:11:FA:7C:1B:5E:D7:73:95:51:A1:0A:A0:CE:7B
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:bf:f3:10:7f:94:39:3e:57:5a:73:c0:3d:fd:4f:02:4a:
c9:11:8f:af:d0:cf:df:c2:8f:8f:2d:32:7d:98:53:14:f6:1a:
64:be:21:a1:1d:08:b4:fd:7a:bc:98:22:2e:fa:74:02:c6:f0:
48:ae:c4:ea:83:bd:93:37:5b:88:9b:5b:84:37:ed:47:09:a0:
e8:29:8a:5e:fc:51:f4:2b:7d:2d:75:a5:9e:02:f9:21:14:c0:
f3:2b:1e:5c:80:d4:bb:85:30:39:8c:58:77:b2:be:cf:66:01:
dc:12:93:98:76:cc:5e:2b:51:99:46:18:4f:75:e7:ab:0c:3c:
f7:49:84:a2:6e:0a:4b:ad:7e:b4:98:4e:84:e1:36:ad:21:81:
e0:a8:53:4c:a2:7c:2f:f5:d1:d0:b3:60:ca:8f:4b:55:5b:a9:
57:88:49:2c:0e:9c:a9:9e:13:3c:55:23:31:5c:3b:59:c7:fb:
92:a3:07:7d:ad:e4:90:89:fb:e4:6b:13:ed:aa:85:cc:44:46:
95:9c:02:c6:30:62:aa:0b:c0:06:91:fb:4e:84:1d:1e:32:e1:
ed:4e:08:e5:bc:be:33:ca:ba:8a:23:e4:8f:8e:91:30:3b:94:
d9:52:92:b1:52:64:81:f9:51:6f:a1:84:15:e7:4d:e0:2e:1a:
24:37:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:53 2025 by rpki-client