Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: KQBUffJ4GSYpLPZF7YDpzW9vtyhAAToAQJsuJYSePG0=
Subject key identifier: 0B:5B:9C:F3:93:C4:C1:C7:43:8F:0F:55:D9:15:0A:AB:D8:BB:18:FA
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 0197B6A0661C6DFECB16FF482CA7526CE54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 06CE
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: NIHbvGrpchXXWrrKSbeYSkNWXLwvVbzsnngH9Tqr+Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:66:1c:6d:fe:cb:16:ff:48:2c:a7:52:6c:e5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=0b5b9cf393c4c1c7438f0f55d9150aabd8bb18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:52:2b:35:ad:6a:34:30:7a:be:fb:ee:90:
ad:6a:13:ad:7a:10:f7:72:c8:fa:c9:f2:13:b5:58:
5b:19:91:99:a5:a5:fc:4b:f0:8e:b2:d6:e7:66:19:
af:2b:9e:31:48:2b:9b:f9:bc:19:1c:14:98:04:db:
40:4b:0d:51:fe:65:81:c6:f9:55:3f:96:6a:c5:f9:
94:b2:52:ff:f7:eb:ca:91:41:2f:85:67:c6:9f:bd:
76:3b:5d:45:3a:6c:bf:82:bb:23:5b:db:ff:b8:c9:
d4:4d:8c:9f:52:05:a6:71:6d:93:ab:e8:ae:d0:2d:
7a:5e:8c:e5:ed:31:e7:ea:c8:b4:17:d4:68:7b:f8:
4d:9d:40:d6:a7:81:ba:79:7e:89:22:29:51:cf:84:
0f:d4:79:9f:05:e7:b4:d4:6e:be:89:b2:17:16:99:
1b:75:57:0e:a5:48:c6:a2:08:67:fb:16:35:89:41:
94:06:82:8d:5d:c7:6c:5d:dc:8a:46:61:6c:35:4e:
9a:dd:d0:b3:4b:95:d0:10:5e:79:24:51:dd:8f:18:
ad:ef:0a:3e:a4:31:c2:0d:68:e7:5b:d8:82:d9:47:
06:7d:da:cc:72:48:f9:a7:ca:db:74:30:10:da:c5:
20:70:f6:63:49:18:f4:b3:f3:34:5e:87:fa:80:95:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:9C:F3:93:C4:C1:C7:43:8F:0F:55:D9:15:0A:AB:D8:BB:18:FA
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:92:ab:8c:ca:57:46:92:78:bb:af:28:dc:08:fb:ba:0a:
7f:ab:3d:f4:1a:d4:e5:a8:ce:3d:d7:ab:68:49:5b:14:49:82:
7f:a4:32:2f:d1:c1:63:ae:94:9e:bf:83:23:99:ef:3a:59:f5:
e0:1c:e5:04:1d:e9:88:b8:94:12:53:e8:31:fa:01:2e:2a:71:
a1:04:ed:37:98:a3:6a:6d:bc:32:4b:2e:8a:d7:b4:33:b8:c8:
bb:56:53:c6:63:ce:a2:20:1a:91:05:99:1b:cd:09:e1:72:d1:
09:46:a4:43:33:d8:cb:e9:89:ee:f4:32:49:c9:94:a8:06:ab:
e6:2a:e1:d6:09:d6:74:7d:06:c4:80:31:a9:89:30:33:a8:2d:
63:1d:93:4e:23:12:15:fa:e2:69:6b:24:fc:c3:cc:83:be:8b:
41:40:7d:da:57:09:af:1b:94:28:26:98:58:2f:0e:4c:ea:df:
fa:14:60:90:65:93:33:e6:30:e7:22:ab:d2:09:a6:a9:15:25:
0f:66:b7:c4:01:43:06:93:cf:27:b0:1b:c7:69:b2:2e:63:41:
30:87:6a:8b:e7:16:ba:40:ff:e5:1d:4c:66:87:d7:75:92:75:
13:20:5b:7b:08:d3:a1:1d:e3:9e:66:12:55:13:d0:86:bf:0b:
4f:9d:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client