Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: MZqDyBgQHHPjBYdsZY4dh3y2xvOT3PcdXjYI1B5/xZg=
Subject key identifier: 37:0F:E4:FF:26:86:5F:5D:3E:6A:A9:1F:31:96:6E:C9:CD:D7:C3:F6
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 0196A389EC779CCA210C58E95CE947D4E033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: F6
Signing time: Tue 06 May 2025 03:00:47 +0000
Manifest this update: Tue 06 May 2025 03:00:47 +0000
Manifest next update: Wed 07 May 2025 03:00:47 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: Cf4j1LM5BESqYUhtF7rWUu9whtHeJZvMDCKRpEEGAFI=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:ec:77:9c:ca:21:0c:58:e9:5c:e9:47:d4:e0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: May 6 03:00:47 2025 GMT
Not After : May 7 03:00:47 2025 GMT
Subject: CN=370fe4ff26865f5d3e6aa91f31966ec9cdd7c3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:b1:b9:38:ee:9d:77:30:df:92:e3:98:91:
f7:e4:ca:53:13:36:ef:45:10:a7:41:19:d2:13:4e:
4e:73:bb:7e:de:41:4d:09:15:7a:ae:d1:e8:41:be:
9c:2c:69:80:40:f5:cb:93:aa:a4:19:f2:58:5a:75:
1e:f2:8d:a9:7d:0c:08:1e:5f:15:59:55:49:6a:1c:
05:78:b0:cc:9d:d5:6d:79:28:65:91:30:b8:8c:e6:
0d:c4:c2:21:c4:d5:2f:05:91:20:9f:c4:3f:31:78:
2c:f0:af:c1:c3:93:a4:26:0a:d7:44:41:b5:48:2a:
a4:99:29:d1:f2:94:59:bf:88:03:b6:69:f3:16:11:
51:5a:5c:9a:ec:da:84:d5:83:8a:e0:1a:33:85:ec:
28:d5:a6:72:a5:9f:8a:a7:b1:d8:bf:05:0c:38:77:
99:28:ec:b6:11:c6:73:4e:ec:c0:df:25:2d:ce:a6:
8f:c5:d3:9e:df:1e:02:cb:58:83:dd:98:39:0c:ab:
75:f8:a9:97:76:15:a5:94:36:38:a1:49:d6:01:af:
df:61:0c:08:6b:5f:0e:a9:48:ea:be:e2:2b:a2:9b:
0d:75:6b:6c:36:b2:b6:ee:00:63:d7:fa:a4:a3:5e:
8c:72:d6:37:ff:dc:e5:17:d1:75:fc:c4:a4:9a:d8:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:E4:FF:26:86:5F:5D:3E:6A:A9:1F:31:96:6E:C9:CD:D7:C3:F6
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:d9:ca:ed:aa:8d:f6:2f:79:bf:31:9c:99:9a:ae:10:77:
bb:be:98:d9:a8:ba:bd:d7:8b:d0:2d:7b:f6:36:b7:db:b5:cb:
50:95:c7:71:94:60:b9:02:87:40:9a:32:15:e6:bc:7d:c1:e8:
73:6c:e1:15:de:2c:ed:86:50:a7:c8:3d:81:b3:68:af:87:bb:
f1:9e:37:eb:4f:75:80:95:14:49:d8:fd:ba:26:bc:2e:75:f8:
bb:38:cd:7f:c8:4d:e7:68:a8:07:8e:36:93:20:5f:fc:c2:2a:
06:fd:f9:dc:f1:dc:99:00:25:64:f6:42:a5:fd:6e:76:01:75:
67:79:a1:d9:a9:89:32:77:c1:d5:10:8a:ec:3a:77:94:b5:1e:
89:b2:fe:7c:0d:a5:e3:68:94:f5:52:49:c7:fe:06:a0:64:c7:
ad:00:0a:9f:95:af:83:71:b9:14:33:d0:2b:93:c4:44:f0:82:
4b:dc:29:09:80:02:38:f5:67:d6:0e:ff:ba:24:26:58:ee:ef:
83:9a:84:d1:7b:c6:09:cb:8c:27:04:64:ca:81:10:f4:95:63:
55:05:90:2a:e6:44:15:fd:91:76:d7:14:00:ed:47:f5:80:7f:
19:12:0d:e1:19:3f:2d:54:37:14:f4:a9:24:61:8f:8f:c6:fa:
7c:a8:2f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiex3nMohDFjpXOlH1OAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj
NzkwYzkwHhcNMjUwNTA2MDMwMDQ3WhcNMjUwNTA3MDMwMDQ3WjAzMTEwLwYDVQQD
EygzNzBmZTRmZjI2ODY1ZjVkM2U2YWE5MWYzMTk2NmVjOWNkZDdjM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOSxuTjunXcw35LjmJH35MpTEzbv
RRCnQRnSE05Oc7t+3kFNCRV6rtHoQb6cLGmAQPXLk6qkGfJYWnUe8o2pfQwIHl8V
WVVJahwFeLDMndVteShlkTC4jOYNxMIhxNUvBZEgn8Q/MXgs8K/Bw5OkJgrXREG1
SCqkmSnR8pRZv4gDtmnzFhFRWlya7NqE1YOK4Bozhewo1aZypZ+Kp7HYvwUMOHeZ
KOy2EcZzTuzA3yUtzqaPxdOe3x4Cy1iD3Zg5DKt1+KmXdhWllDY4oUnWAa/fYQwI
a18OqUjqvuIropsNdWtsNrK27gBj1/qko16MctY3/9zlF9F1/MSkmthl9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcP5P8mhl9dPmqpHzGWbsnN18P2MB8GA1UdIwQY
MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt
MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh
LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHADZyu2q
jfYveb8xnJmarhB3u76Y2ai6vdeL0C179ja327XLUJXHcZRguQKHQJoyFea8fcHo
c2zhFd4s7YZQp8g9gbNor4e78Z436091gJUUSdj9uia8LnX4uzjNf8hN52ioB442
kyBf/MIqBv353PHcmQAlZPZCpf1udgF1Z3mh2amJMnfB1RCK7Dp3lLUeibL+fA2l
42iU9VJJx/4GoGTHrQAKn5Wvg3G5FDPQK5PERPCCS9wpCYACOPVn1g7/uiQmWO7v
g5qE0XvGCcuMJwRkyoEQ9JVjVQWQKuZEFf2RdtcUAO1H9YB/GRIN4Rk/LVQ3FPSp
JGGPj8b6fKgvhQ==
-----END CERTIFICATE-----
Generated at Tue May 6 05:22:42 2025 by rpki-client