Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: RJCy3JPWoNyRTYx9hmwGWnGBD6ewjvCcrpeDcrHwofQ=
Subject key identifier: 1F:5B:07:84:A4:D9:CE:52:74:93:F2:11:69:53:16:96:C4:3D:8C:F8
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0197B6D7573F0FBAFCCA50E094E653A8DE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0A0B
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: q+8d/BCzgDXUHclm5ILGoznv8hmPQHnjC/QIMz1CKGU=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:3f:0f:ba:fc:ca:50:e0:94:e6:53:a8:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=1f5b0784a4d9ce527493f21169531696c43d8cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:e3:ef:5f:00:b9:42:25:2d:20:9a:a6:98:
71:26:3e:58:d3:f1:86:65:c4:b7:a3:1c:be:20:9d:
7a:c3:47:f3:dd:8c:ef:44:79:e4:6e:84:45:61:39:
5c:6b:84:dd:c5:ef:62:9c:ce:df:8a:85:87:96:c9:
3c:8d:c4:a8:7b:a8:61:98:c6:70:b9:cc:03:54:3c:
96:33:aa:32:46:e0:3c:50:3a:b5:53:00:18:a7:ca:
7f:e3:fa:85:25:4f:01:bd:2a:74:43:fa:d3:b7:b8:
f6:f2:6e:16:ab:df:51:c9:03:da:3a:ab:2d:99:2d:
a8:37:25:08:c2:d9:56:66:e0:89:65:6d:a2:fc:7a:
cf:0e:fd:2d:26:18:4c:a3:a3:aa:61:ac:66:d5:7e:
a5:33:bc:0d:97:12:3a:cc:d3:0e:54:f5:ad:7b:c2:
d4:5b:89:80:56:0f:1a:87:76:9e:03:96:82:c4:d5:
dc:a7:7c:a7:fd:72:06:6b:15:2f:c6:9f:18:a1:58:
8b:ac:5c:d9:b9:c8:99:1c:24:4a:51:c5:a6:a8:24:
74:e4:da:b9:85:ec:de:43:92:3a:0d:fa:5d:35:aa:
20:a4:91:42:4a:a4:68:39:dd:90:db:39:ff:dd:c4:
19:3b:59:99:2e:07:f7:51:fb:b1:2a:53:6d:84:d5:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:07:84:A4:D9:CE:52:74:93:F2:11:69:53:16:96:C4:3D:8C:F8
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:7f:80:ae:1a:ee:ec:b2:b9:e0:58:5c:a7:9b:b0:17:3d:
19:d2:2e:8b:8a:6e:e3:a6:ff:13:8b:32:99:d2:69:3b:7c:82:
bb:2a:a3:87:07:f1:51:4f:51:b1:d8:64:3b:a7:38:01:8c:62:
ef:71:dc:10:6c:1c:05:fc:8b:8a:92:85:76:a0:9b:6c:1c:db:
dd:83:a7:b5:2a:f1:85:ce:60:e8:b3:c8:7b:b7:4d:27:a4:9c:
98:c1:b8:17:1f:82:64:ce:9a:da:00:0e:86:e4:5d:38:66:f5:
25:e5:e8:42:b5:17:7d:3e:ad:f6:fd:0a:4f:2b:6c:00:e9:c4:
01:fd:0b:3b:c3:9f:a4:8b:64:cd:e3:9d:0d:ed:38:a1:58:b6:
8e:f8:06:66:df:ac:d4:9d:1f:0e:20:0d:8b:0c:33:f0:8c:1a:
69:0f:ab:70:bc:ed:7d:b5:58:52:68:58:47:9a:38:e3:45:8b:
80:4b:80:a2:31:bf:2a:7a:03:01:8a:e9:4b:27:65:79:e9:72:
12:aa:89:97:c3:44:23:02:fc:c1:5a:f4:4c:f0:4b:e0:05:45:
2f:0c:0d:98:72:5f:f6:f1:3b:6b:29:f4:49:a2:b8:09:bd:f9:
2b:fb:67:93:86:33:02:63:cc:5f:f9:5f:96:37:5f:a3:01:a8:
13:9d:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:10 2025 by rpki-client