Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 84c7piSUX/SPnH/Xc+FCoaRhmE4FDoZHp4BiC16dI48=
Subject key identifier: 33:82:84:D6:C9:93:F8:BD:BF:95:93:18:61:6B:10:8A:03:E1:DF:8F
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 0196ADD6238FD0A82002E597F36D6800D4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0301
Signing time: Thu 08 May 2025 03:00:14 +0000
Manifest this update: Thu 08 May 2025 03:00:14 +0000
Manifest next update: Fri 09 May 2025 03:00:14 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: c2o5K9Dsa2Mkd/B7WQRjy4+f2MqSF95LsxonMBFlO2Q=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:23:8f:d0:a8:20:02:e5:97:f3:6d:68:00:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: May 8 03:00:14 2025 GMT
Not After : May 9 03:00:14 2025 GMT
Subject: CN=338284d6c993f8bdbf959318616b108a03e1df8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:5a:21:49:fe:c3:c3:a2:27:16:fc:e6:1a:
1b:16:8b:10:fb:b9:64:2e:e7:58:95:39:01:bb:6c:
6f:ea:40:dc:34:00:9e:12:45:cc:1c:26:9e:88:f2:
a3:33:d7:2b:6e:7a:63:60:5f:b9:68:be:50:af:2d:
3e:48:21:c2:69:84:72:55:ea:50:9d:56:bb:12:cd:
48:2c:a3:d9:84:a5:e5:b6:74:2f:41:18:ec:2a:5c:
f2:af:ae:1e:3f:df:66:6e:de:5e:a9:59:3b:e2:27:
36:ca:ba:16:4c:15:f1:fb:08:25:44:bd:58:bd:89:
8a:6d:38:f0:c8:0f:6e:4b:13:76:4e:a3:3a:c2:aa:
1e:ae:a7:22:44:89:38:cc:24:b1:a6:9a:f0:15:2e:
d3:a2:bb:13:62:e9:cc:b1:a2:db:7f:08:72:31:ed:
f9:8b:94:ba:ed:38:7f:9f:84:c7:50:af:06:35:38:
ce:cf:84:15:45:97:6c:a2:aa:c3:e4:df:21:5b:00:
1d:3c:34:22:03:5d:66:98:26:fb:5d:79:b1:3d:e5:
8e:94:19:d6:7d:ec:d3:94:d9:eb:17:59:13:cc:99:
04:78:ff:ac:08:19:cc:28:6d:3c:f3:e0:00:a3:3a:
08:46:6f:60:7e:bc:15:dc:50:3d:48:3d:77:cc:89:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:84:D6:C9:93:F8:BD:BF:95:93:18:61:6B:10:8A:03:E1:DF:8F
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:de:96:c6:4c:f8:36:79:c1:f9:15:af:9c:50:5c:68:f4:a0:
8b:8b:28:38:b9:6e:a1:31:4c:4b:b4:96:b1:47:33:4f:22:2f:
97:13:d8:9d:39:3c:9d:74:a7:b6:2b:7d:9a:10:6a:af:20:43:
f2:5c:ec:19:54:72:57:72:b8:67:51:4e:d4:cf:a0:2d:e2:9b:
db:4b:a9:9c:36:2d:1d:2a:71:e5:3d:31:d9:3d:c7:b1:0f:22:
a1:64:10:51:db:46:20:3b:6d:34:a8:97:0e:fe:3f:c5:b6:5c:
e7:01:43:a7:76:47:54:eb:cc:c4:3e:88:72:82:66:18:61:93:
60:6f:f0:2f:e0:51:a9:07:3f:a5:d9:ba:96:48:71:ec:8d:ed:
60:19:da:27:6a:27:55:81:c0:e4:66:74:a0:92:92:fd:35:64:
e9:d2:30:18:17:aa:30:0e:99:88:de:68:83:94:f8:e8:bd:32:
6e:d7:d4:8e:ba:19:85:3c:2e:95:c2:9a:c8:9f:9d:7f:da:08:
a7:fa:8d:d6:ad:e1:aa:ec:fd:05:6f:13:be:9b:ee:4a:b8:ce:
bd:f8:4c:96:ea:4c:c4:83:4b:c5:c1:13:46:e3:4a:c4:a5:74:
d4:aa:8c:45:00:5c:01:2f:56:f0:39:84:9b:f8:b1:4e:b7:2d:
ff:5f:9f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:51:58 2025 by rpki-client