Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: DoJp00BknsQJEIwxFUKajd7Q4roJoQ/8IolyMbZVylw=
Subject key identifier: 4A:1E:A7:02:DA:EC:CC:69:9B:26:20:B5:34:57:D9:6F:73:20:96:46
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0197B6A147AF5AF339D3F4947B1561B73FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 038A
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: Z1eSMyM3jCqkPEAd6ufG8HwKJcmtqn73wb5izL4MZwY=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:47:af:5a:f3:39:d3:f4:94:7b:15:61:b7:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=4a1ea702daeccc699b2620b53457d96f73209646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:2e:b7:5a:c2:66:eb:b3:d5:51:49:13:11:
46:a7:bc:9b:c6:90:76:2f:97:cb:23:71:0d:e5:29:
be:cf:26:b2:78:a8:b6:cc:5a:1e:48:0f:a1:fa:5c:
6e:42:57:70:20:a9:09:d3:52:36:56:9c:84:9a:b6:
d2:56:6a:fd:98:34:05:dc:87:df:5e:90:83:c5:03:
e1:68:41:dd:4a:80:b9:05:c1:e0:6e:cc:71:bf:aa:
cf:5f:80:af:87:45:01:e9:16:78:15:20:e0:19:8f:
b1:c0:2c:ff:3b:bc:01:ed:a8:8e:ba:c7:fe:5c:f1:
ba:59:9f:11:e3:b0:80:c5:03:5f:bd:98:47:3e:4d:
03:72:8a:db:d5:6f:bc:e3:53:6a:fa:16:13:af:14:
08:63:9f:60:d1:8e:e4:04:13:15:75:6a:97:7d:db:
b0:d2:fe:aa:59:0a:89:6b:b0:47:1c:6f:b9:72:ae:
8b:07:e4:83:fd:98:a3:0d:78:7d:ae:91:62:4e:f6:
52:54:fb:49:00:39:c5:f9:48:ca:3a:3b:df:dc:13:
df:b9:c4:42:bb:19:64:94:49:c2:8e:c6:6f:b7:32:
ac:af:11:78:ca:b6:1b:29:06:bd:50:20:ca:50:38:
28:db:c6:33:a2:a7:ce:bd:96:4d:38:36:72:88:50:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1E:A7:02:DA:EC:CC:69:9B:26:20:B5:34:57:D9:6F:73:20:96:46
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:ba:a1:24:ab:45:07:ac:ca:85:fb:c0:4a:d1:f5:f1:f4:
d7:c7:2f:8f:cf:ed:cc:0c:b1:fa:72:c2:af:0b:b7:55:21:db:
c9:9b:5f:19:bf:0c:23:7a:20:50:20:a2:86:a0:99:09:7b:ed:
58:f3:af:1a:17:79:61:c1:44:04:24:0c:86:4c:7c:7f:68:39:
fe:39:8d:4c:45:71:28:5d:17:1b:89:41:b9:5f:1d:9a:9c:00:
2b:97:88:9e:72:cd:c9:cd:10:b7:5e:a9:78:8e:bf:60:96:12:
c8:50:8e:ec:71:a6:d4:14:72:b0:bb:9a:29:be:0b:ca:c1:e6:
9d:9e:6c:43:21:ba:ae:04:39:47:97:0b:08:28:59:fd:b5:bd:
4f:72:5d:48:ea:a2:17:0d:95:d7:4a:12:74:58:4c:bd:02:33:
8f:39:83:9f:9c:17:75:c2:7c:34:98:3d:2e:e5:fc:8f:25:3d:
59:ae:d4:a3:e6:77:64:ae:79:47:1f:5d:3b:5a:0c:18:32:0d:
96:5b:28:1c:5c:70:a7:a8:fa:ce:21:49:8a:10:19:b4:b1:e3:
e3:63:9d:6c:34:81:95:55:13:9d:0e:3c:97:9e:de:d5:4d:08:
6f:a0:bf:a9:4c:cb:4a:de:72:31:81:ad:7f:0a:59:69:1a:b7:
87:3d:43:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUevWvM50/SUexVhtz+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjUyNzU1MjFkMjljYWY3MTc2ZWUyYzM5OGQ0MGExZWM0
NzljNDIwHhcNMjUwNjI4MTMwMTUyWhcNMjUwNjI5MTMwMTUyWjAzMTEwLwYDVQQD
Eyg0YTFlYTcwMmRhZWNjYzY5OWIyNjIwYjUzNDU3ZDk2ZjczMjA5NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy4ut1rCZuuz1VFJExFGp7ybxpB2
L5fLI3EN5Sm+zyayeKi2zFoeSA+h+lxuQldwIKkJ01I2VpyEmrbSVmr9mDQF3Iff
XpCDxQPhaEHdSoC5BcHgbsxxv6rPX4Cvh0UB6RZ4FSDgGY+xwCz/O7wB7aiOusf+
XPG6WZ8R47CAxQNfvZhHPk0Dcorb1W+841Nq+hYTrxQIY59g0Y7kBBMVdWqXfduw
0v6qWQqJa7BHHG+5cq6LB+SD/ZijDXh9rpFiTvZSVPtJADnF+UjKOjvf3BPfucRC
uxlklEnCjsZvtzKsrxF4yrYbKQa9UCDKUDgo28YzoqfOvZZNODZyiFDb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoepwLa7MxpmyYgtTRX2W9zIJZGMB8GA1UdIwQY
MBaAFCtlJ1Uh0pyvcXbuLDmNQKHsR5xCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYt
OWVhOWY1ZTIwM2EwLzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYtOWVhOWY1ZTIwM2Ew
LzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD26oSSr
RQesyoX7wErR9fH018cvj8/tzAyx+nLCrwu3VSHbyZtfGb8MI3ogUCCihqCZCXvt
WPOvGhd5YcFEBCQMhkx8f2g5/jmNTEVxKF0XG4lBuV8dmpwAK5eInnLNyc0Qt16p
eI6/YJYSyFCO7HGm1BRysLuaKb4LysHmnZ5sQyG6rgQ5R5cLCChZ/bW9T3JdSOqi
Fw2V10oSdFhMvQIzjzmDn5wXdcJ8NJg9LuX8jyU9Wa7Uo+Z3ZK55Rx9dO1oMGDIN
llsoHFxwp6j6ziFJihAZtLHj42OdbDSBlVUTnQ48l57e1U0Ib6C/qUzLSt5yMYGt
fwpZaRq3hz1DGA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:31 2025 by rpki-client