Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json)
Hash identifier: M40uiwVfSNEoc5+6z8vavUb5nRVNOt9WkHx984aZxrw=
Subject key identifier: 2B:24:AF:96:EC:0E:FC:61:8C:27:BC:44:29:9E:B0:E1:6E:66:38:3A
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0197B77C7AB236D4CD84808B70523C742E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
Manifest number: 143D
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: EmnztwXbSEXb2ilg33WnyS/q/bUJWqy5V8osvTKVxaM=)
2: L_dIoL-v8Ses7NHNA9_hOVuTcYA.roa (hash: spjcPc+t+vh7tkw91Ed++bnrR9F1eRl6ADtzWUxuTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:b2:36:d4:cd:84:80:8b:70:52:3c:74:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=2b24af96ec0efc618c27bc44299eb0e16e66383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:fa:29:73:de:37:09:d2:8c:b1:e1:05:6d:
16:0c:62:61:25:95:9f:d9:cd:bf:71:de:52:68:11:
89:84:1b:3c:4b:b6:ed:29:77:f2:fe:57:72:e8:b9:
06:39:d6:31:11:45:2d:d4:5f:0d:0c:41:4d:27:9f:
5c:4a:df:61:25:e0:4f:0c:1c:16:5b:b8:d1:1d:cf:
dd:b3:da:58:4b:1b:92:02:17:81:7f:64:b4:b5:5a:
98:ce:36:c5:55:55:e0:5e:a5:c2:90:32:c4:79:63:
e9:d4:42:a0:f2:4f:07:54:c0:f3:85:c2:e4:be:43:
b4:b8:ee:df:be:58:82:5a:f6:f2:93:47:53:15:d2:
6e:08:81:5c:59:bd:5b:e3:4a:6f:78:e3:62:d4:e0:
c7:2d:14:a7:77:2c:fc:6d:31:f6:2e:19:b3:dc:28:
6b:d1:44:c8:89:89:43:ff:ab:cd:12:42:d5:d5:51:
74:20:94:1d:c7:65:72:b0:4c:e3:f5:6d:8c:0f:49:
67:02:83:e9:bc:4a:57:a6:86:fb:6a:86:7b:ea:4a:
2b:be:b3:b4:49:9c:77:7e:31:de:e3:aa:9f:3c:59:
c5:6b:09:34:e7:96:8b:2a:93:46:2e:73:ef:fb:c6:
13:b9:5e:69:e7:43:d3:88:f6:e6:1e:06:1a:83:a4:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:AF:96:EC:0E:FC:61:8C:27:BC:44:29:9E:B0:E1:6E:66:38:3A
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:5a:20:03:5d:97:d0:01:d2:85:0c:4e:48:dd:14:27:27:
f2:8c:14:47:f3:e1:96:75:68:90:c8:c1:dc:ed:da:86:3e:ef:
ac:68:70:56:76:5b:e4:8f:73:a6:49:57:21:5b:33:44:f8:cd:
11:0b:df:1d:1f:b3:0f:73:59:a1:d5:7c:df:02:53:b2:4b:f7:
64:78:8d:14:73:56:c8:44:8f:79:eb:04:21:36:d1:31:39:3f:
a8:c8:a4:32:54:d8:24:68:d5:74:81:5a:77:49:d6:ba:87:81:
73:eb:a8:2b:de:30:3b:5f:a9:7b:81:20:6d:cc:b9:1f:6d:da:
16:c3:be:43:ed:a2:a0:c1:cb:28:69:f0:d5:66:6d:94:81:5d:
d0:10:d7:1c:68:4a:95:4e:f3:eb:93:33:bc:fa:8b:77:1c:b3:
e3:e1:23:6b:aa:2f:68:e7:c9:61:d5:c0:86:01:12:55:94:bb:
9c:fb:27:02:5f:74:10:e8:2b:8d:5b:b8:25:06:62:2e:08:b9:
7a:89:d4:7a:82:91:0d:57:77:ee:12:e3:96:e4:74:3e:46:ef:
70:1f:14:91:af:5e:a2:f9:8f:cd:6b:16:3d:e3:5d:ad:82:d8:
1d:31:57:55:f9:41:ab:db:06:4d:34:d2:17:e0:82:fd:55:e2:
ac:00:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:31 2025 by rpki-client