Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: xholTZwkRD7EFIfylcjIHLBtjR+feXCSVsUoRkkVBX8=
Subject key identifier: 79:71:C6:C0:5A:61:9B:2C:68:AE:84:C0:95:3F:24:BF:5D:E6:70:EB
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 0197B7453181F4C9E19DDACDD31A31702445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: 1KHOH8dnLE2dHgRx1rfEFqUkkfr/tbumOvj0r15HqbI=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:31:81:f4:c9:e1:9d:da:cd:d3:1a:31:70:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=7971c6c05a619b2c68ae84c0953f24bf5de670eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:22:64:93:69:18:2e:3a:bb:0a:73:1b:56:
e9:36:ca:14:b5:e2:ff:cc:ab:da:97:e1:cb:72:64:
3c:2a:e4:7c:f6:1e:e5:fe:a3:89:f7:7a:dc:7d:35:
8b:16:d4:f4:c1:bf:99:01:9f:f9:0a:5c:39:7a:c9:
4e:a1:62:c3:fd:7c:f6:19:00:a5:2c:64:a2:7b:9c:
f9:41:66:99:fb:53:e0:09:3a:3c:9c:ea:c2:54:ce:
0b:15:3f:9d:8e:3e:8d:f2:77:e6:5c:87:d8:88:cb:
2c:bf:5f:71:bc:27:8b:17:11:ed:12:33:fa:73:fa:
9e:63:bd:36:b2:55:4f:22:ad:40:5f:ff:8e:e7:2d:
56:4c:d2:92:fa:24:4b:f7:b1:f6:31:a6:35:52:6a:
c8:48:06:7c:3f:01:09:69:13:b9:58:e9:4a:86:7c:
ff:00:03:9d:b9:f2:e1:05:a5:33:d5:32:11:cd:6a:
29:b8:4c:6d:ae:4a:3b:12:c0:07:91:17:20:4a:21:
a8:66:06:31:6a:1c:8f:7d:4f:fc:c7:3e:4a:81:05:
52:36:99:f3:25:d6:2a:56:55:80:cf:43:ae:ed:8b:
19:a0:60:f3:ce:1e:18:67:a9:79:95:2d:e3:2d:b3:
46:a6:73:7a:e3:53:a2:16:ac:1d:46:43:6d:05:0d:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:71:C6:C0:5A:61:9B:2C:68:AE:84:C0:95:3F:24:BF:5D:E6:70:EB
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:05:22:a6:b3:37:22:56:6b:b0:b2:64:c0:5f:6b:19:f6:
08:32:33:de:35:c3:4d:27:6b:6d:46:ae:b8:ad:cd:80:34:20:
60:1d:5a:e5:53:6a:2a:ea:01:56:ef:d6:77:2c:d7:6a:d6:0b:
45:86:67:2d:f8:67:03:7b:df:da:8d:8b:5d:52:95:17:5e:29:
37:cf:5b:c0:1d:5d:eb:da:25:6c:fe:1a:92:46:b1:09:76:11:
89:29:4c:d7:41:15:44:28:f1:c6:2e:8f:a7:32:dd:e2:76:f2:
c8:3e:9c:60:3b:5a:47:f8:00:df:78:0d:95:06:45:8a:ec:a4:
60:1f:82:44:5f:30:a1:e4:b1:a9:0f:db:49:f2:53:a8:e9:92:
f2:48:31:de:ab:42:de:24:54:9b:27:3f:5e:25:68:43:50:71:
d1:8b:e2:79:27:37:93:e8:50:6c:4c:9d:07:8a:a6:c5:bd:69:
a4:84:b0:3d:57:a1:47:2b:90:1d:b3:d9:5a:0d:14:01:6f:ef:
fd:ad:f3:db:37:cc:10:78:52:d2:80:52:bf:94:35:d5:df:31:
fc:03:9a:dc:a7:b9:21:8b:cf:f3:c9:b7:59:7e:7b:c3:e4:42:
08:4c:59:15:7c:78:52:f7:f7:b2:b6:d8:4d:f7:27:98:c4:38:
41:3b:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:00 2025 by rpki-client