Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: qKqSOnhhyU5DimneXmrVQBXZ9mD2FoOTqBYaUngWlus=
Subject key identifier: 10:66:7C:56:EA:F9:69:F9:2F:AC:A0:D1:AA:32:E7:BB:A4:DE:E0:4D
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 0197B5C4B5B45E632891F5A59B0C3450CC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0184
Signing time: Sat 28 Jun 2025 09:00:57 +0000
Manifest this update: Sat 28 Jun 2025 09:00:57 +0000
Manifest next update: Sun 29 Jun 2025 09:00:57 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: iF8CVSen4ZZB3mcLyLJzgU/vwAPTM0XLO6wSbhVqIAs=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b5:b4:5e:63:28:91:f5:a5:9b:0c:34:50:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Jun 28 09:00:57 2025 GMT
Not After : Jun 29 09:00:57 2025 GMT
Subject: CN=10667c56eaf969f92faca0d1aa32e7bba4dee04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:70:c0:ea:b3:b7:15:70:19:b8:af:a3:40:
0d:63:37:1a:c0:ea:00:52:ed:e5:74:58:b9:e9:59:
67:45:98:e8:23:13:ab:6c:43:4d:50:02:6a:90:c1:
21:59:1b:d7:ec:dd:ac:0f:3c:09:a1:00:33:4b:26:
49:7e:d6:f5:d7:d9:21:42:38:20:93:dc:16:d7:c4:
0e:95:e3:63:d4:cd:0e:5c:da:68:ca:4e:bc:f5:9b:
6c:6b:54:e4:52:bf:b5:83:e3:f5:3a:75:31:fd:e6:
3b:1b:6b:fc:64:f8:2e:8d:18:34:7f:cc:c4:33:9b:
13:f3:be:77:15:88:a0:10:5d:0f:45:a9:49:61:e2:
42:2c:fc:8d:c4:9a:bb:5c:2c:e2:05:b6:93:ee:dd:
c0:88:06:7c:f1:b3:2c:cc:06:cc:99:ae:77:0a:f8:
bd:53:7e:34:1f:0e:a7:54:a0:fd:8b:ae:66:b4:61:
49:98:10:da:99:1b:c0:d8:eb:26:06:a7:0b:57:75:
c3:69:70:53:bb:f3:62:f1:02:fa:51:31:5a:96:ca:
69:50:dd:50:af:38:68:b1:f4:bf:d5:58:db:e5:95:
d3:c4:d1:7a:01:f2:1f:89:1f:b1:08:87:d6:f4:5f:
cf:bd:83:cc:6d:cc:bd:a7:f3:1c:4c:48:cb:ef:dc:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:7C:56:EA:F9:69:F9:2F:AC:A0:D1:AA:32:E7:BB:A4:DE:E0:4D
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:6c:37:42:50:08:8b:e1:2a:36:00:31:53:b8:29:20:28:
f1:c5:ea:98:d8:46:b4:1b:74:29:2e:46:0b:18:38:e2:07:cb:
ba:b0:4f:c7:be:fa:34:47:87:71:d1:f0:dd:84:b9:52:2c:e3:
d0:4b:81:e6:ff:bc:ca:23:7d:bd:85:32:12:9c:f1:f8:d3:47:
d8:7f:ef:20:e5:5b:ea:b0:d3:f3:0e:13:69:f9:6b:27:53:27:
aa:a0:62:21:a6:8d:f4:cc:7a:21:5f:0a:b5:7c:0b:32:4d:c7:
a8:e7:bc:91:8d:58:91:cf:50:05:92:4a:79:3a:82:55:e8:af:
1e:b5:4a:68:c9:98:d5:08:88:ca:e1:c6:a7:46:71:f0:dc:1f:
d1:cc:27:25:73:5b:30:24:be:88:2a:2d:19:87:88:58:f2:1b:
af:66:ee:8f:11:1a:8d:b5:7c:05:7d:d1:4d:61:c5:ab:4d:e0:
07:dd:51:8c:75:93:3e:6d:89:06:e5:34:ce:bb:33:e1:11:fc:
65:3e:70:3a:30:4d:cb:22:ef:78:b7:76:04:68:96:fc:34:59:
65:73:c8:71:69:5c:22:7b:fb:4c:3b:c6:1c:e2:e3:79:10:8d:
49:e8:f7:d5:dd:17:b6:10:97:af:54:ba:38:a0:4f:a7:68:1b:
59:54:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:16 2025 by rpki-client