Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: KMMFbS5MbaLScRRkJo/WRg5NSIyA7hiBfh1LkmQK3IM=
Subject key identifier: BE:38:09:86:D5:BB:4D:8E:31:57:CF:ED:3D:DB:42:28:2B:04:BC:31
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0197B5C52253C75EE57D28943AD3A7DD9842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0B56
Signing time: Sat 28 Jun 2025 09:01:24 +0000
Manifest this update: Sat 28 Jun 2025 09:01:24 +0000
Manifest next update: Sun 29 Jun 2025 09:01:24 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: SnuzVPhYnFfg06oJKvEHHMIJHGV902G+pFbl4fsRs9E=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:22:53:c7:5e:e5:7d:28:94:3a:d3:a7:dd:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jun 28 09:01:24 2025 GMT
Not After : Jun 29 09:01:24 2025 GMT
Subject: CN=be380986d5bb4d8e3157cfed3ddb42282b04bc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:3f:9d:06:0c:84:76:91:2e:df:ce:8d:b4:
d4:50:ed:94:b2:d2:df:66:28:07:b2:ea:b4:63:6f:
f8:94:a6:fe:e9:5a:8c:ff:58:1b:e7:12:b3:3d:9f:
8b:4e:dc:4f:09:91:e7:49:4a:e5:b3:d9:76:c7:d6:
9d:2a:48:fd:cc:0a:89:bd:f2:b6:f9:3e:22:92:61:
38:ea:4a:f5:9e:4d:0f:6a:3a:3b:96:ef:ef:99:9a:
84:9b:b4:d6:6b:33:a2:39:51:06:d3:e1:bd:f8:d9:
44:01:ab:f9:6e:99:75:34:21:87:a1:15:e5:72:16:
c6:45:8e:b1:d0:d9:f0:ce:fc:8d:b4:84:60:50:cc:
60:e4:31:6c:07:19:b7:e5:1e:0f:75:62:b3:d6:e0:
f8:d0:cd:56:5e:87:39:87:a1:89:3f:e8:ea:b5:6a:
46:d1:30:be:c5:58:f1:be:60:85:94:cf:4b:32:b1:
26:e1:ce:1d:e9:78:60:69:97:57:b1:d0:ce:42:0d:
20:ea:16:db:1f:e8:50:73:3e:f6:fb:cc:69:e9:3d:
f5:5c:91:fd:53:a8:28:71:bc:0c:87:c6:ed:0f:a0:
2f:ba:1a:7a:ff:53:4d:a3:84:b1:16:47:1a:18:c5:
fa:b8:55:ba:10:08:66:97:82:ee:43:b1:fa:f1:13:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:09:86:D5:BB:4D:8E:31:57:CF:ED:3D:DB:42:28:2B:04:BC:31
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2d:80:16:4f:95:1b:25:07:e5:49:85:f7:b2:2e:28:52:97:
47:c6:a1:0a:4e:b4:56:9a:89:a8:b8:aa:62:8b:24:62:1a:0e:
81:f4:02:4e:4a:97:fc:ff:a4:b7:58:01:31:db:b4:cb:96:16:
84:9c:c9:36:38:86:bc:db:af:d2:81:35:ee:12:b3:0e:c0:f0:
cd:88:42:c0:b6:0b:de:22:05:5f:3c:f7:3b:7c:e8:51:93:8e:
78:3b:81:17:f7:bc:6e:dc:9b:51:33:b8:0b:dc:6a:e0:06:43:
42:a3:63:bd:08:a4:ef:37:fb:62:b5:d7:1b:36:29:6a:48:d1:
5b:93:85:3a:8e:22:15:d7:fc:9f:14:70:ce:83:6e:37:47:ae:
e6:5b:9e:05:ea:84:13:0c:5b:cf:aa:29:00:4e:b5:94:b4:a7:
2c:7e:28:b7:2b:e5:53:d0:a6:a0:ee:10:b5:5e:52:63:43:bc:
18:a7:27:c5:9a:0b:0e:f6:d9:ba:11:fe:08:73:32:43:53:83:
ec:26:cd:98:d7:17:c2:db:1b:4c:79:47:19:d8:95:4c:dc:43:
62:12:cd:f0:36:fb:58:b0:1b:79:57:b9:d0:0b:7a:ba:8a:a4:
6e:ed:fa:30:87:d1:f1:a2:b9:ab:13:db:6b:05:69:1d:02:82:
08:71:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:49 2025 by rpki-client