Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: eknOqw0MDorg7kJMGJA2e5MHn46dq2++WGnAlVTm8O4=
Subject key identifier: 75:F2:3F:74:1A:11:2B:1C:49:D2:1A:FA:34:96:8E:03:55:22:C9:89
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 0197B70F5176F5CD32FB4AC9BC436B1888C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:02:03 +0000
Manifest this update: Sat 28 Jun 2025 15:02:03 +0000
Manifest next update: Sun 29 Jun 2025 15:02:03 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: XGauEOhmwx4md4Yw7tMLkBq2zHhh31zmh7s1SSWy3SA=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:51:76:f5:cd:32:fb:4a:c9:bc:43:6b:18:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jun 28 15:02:03 2025 GMT
Not After : Jun 29 15:02:03 2025 GMT
Subject: CN=75f23f741a112b1c49d21afa34968e035522c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:52:4c:2d:b3:83:70:93:f6:fc:7b:eb:85:
a2:aa:2c:fd:7a:40:ed:b5:3b:6b:7d:79:c4:6a:f5:
bf:9b:3e:96:02:54:29:6d:3c:ba:6c:23:b3:96:17:
1a:48:27:5d:26:65:5a:4d:5b:fe:4e:6d:27:f0:cc:
f2:27:d0:d5:ab:dc:a6:b8:55:07:83:66:7f:47:4f:
80:3f:7a:3a:dd:b2:f1:7a:3f:f8:31:d9:a5:36:ef:
f0:20:14:9c:6c:d7:c5:91:bb:9d:3d:1b:9d:79:e6:
e4:1a:b6:07:51:34:7d:05:66:2e:fc:13:83:9a:94:
3f:58:ed:18:a9:35:60:e9:88:a2:0e:10:d6:65:54:
c1:b1:73:d8:ef:b7:bd:f1:fb:73:77:63:20:c9:7a:
e5:58:95:16:ce:f4:f3:69:c2:bc:cc:8f:bf:20:fa:
62:d6:3c:0a:77:08:2c:13:57:3c:93:a0:f8:56:38:
cc:33:24:6e:6c:6a:9f:04:37:e3:50:1f:d5:6f:ed:
82:44:19:6b:e1:05:3c:0f:73:17:96:ee:7d:99:73:
54:1b:21:8a:9d:59:eb:d9:b1:df:29:3b:4f:17:7e:
23:49:d0:0d:f8:83:b1:ce:9d:c2:3c:6a:e7:e9:8a:
56:86:83:3f:32:a9:97:78:e4:ef:7c:6d:b2:ed:7f:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F2:3F:74:1A:11:2B:1C:49:D2:1A:FA:34:96:8E:03:55:22:C9:89
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:99:0f:4e:e1:bf:e9:b6:69:91:bb:ca:c8:45:8a:f9:ac:6f:
85:17:ea:b4:af:15:fc:44:ee:04:05:50:18:6e:0d:1d:34:6e:
c0:fc:a6:5d:33:85:ae:f0:a8:a6:46:07:ed:ca:5e:f3:88:2e:
e4:e8:b6:37:22:bc:59:6e:c8:65:63:07:fa:10:de:34:72:5a:
93:ba:3e:72:8b:fc:fe:a5:47:3b:25:7a:1e:bd:e9:da:9f:06:
5b:a0:67:1e:1f:7b:43:90:b9:e2:e2:ed:8c:da:6a:13:91:97:
66:ed:53:89:cf:db:60:bf:eb:7b:5c:f8:e9:0d:dc:cf:f7:67:
ef:e9:76:67:12:5a:63:05:c8:71:ac:02:46:05:f4:89:db:29:
72:45:d1:c9:8e:c1:77:5d:c9:3c:0d:fb:aa:54:a9:06:34:94:
5c:13:bd:72:a1:83:c5:6b:cd:17:6b:53:37:93:8a:e2:80:ca:
76:7c:71:aa:9e:56:37:d4:ac:29:23:26:a5:17:e5:64:49:e2:
a2:fc:87:4d:c4:bc:76:02:18:c6:8e:c1:75:d5:0f:3f:d2:92:
e1:90:49:34:6e:8a:6e:ee:de:2c:ed:54:f7:1a:47:a7:b8:94:
13:44:4e:74:d1:26:63:53:c6:de:eb:e5:5c:2f:9b:35:49:fe:
e8:4b:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:22 2025 by rpki-client