Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: XE+D6/6jmEZuEKDVLICDuD1Z7DjeVpoKDS3xzK/+gqE=
Subject key identifier: CB:52:51:54:4B:A7:2B:CD:34:75:4F:EF:53:14:F3:D0:FD:23:80:D9
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019770AC7C3368F84BE4B0152E5F6230C1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 1137
Signing time: Sat 14 Jun 2025 23:00:41 +0000
Manifest this update: Sat 14 Jun 2025 23:00:41 +0000
Manifest next update: Sun 15 Jun 2025 23:00:41 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: hvd4hr0YDO8onSdmp7zVx+mYAFVbkpi6NY59PSBwMQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:7c:33:68:f8:4b:e4:b0:15:2e:5f:62:30:c1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Jun 14 23:00:41 2025 GMT
Not After : Jun 15 23:00:41 2025 GMT
Subject: CN=cb5251544ba72bcd34754fef5314f3d0fd2380d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:b7:4c:00:b0:e7:9e:d4:d6:4e:82:9f:d7:
25:1d:33:13:a2:20:ff:a1:f9:a2:d3:f0:2b:c5:8e:
6d:c6:08:7c:10:8f:23:46:b9:ab:10:48:27:65:b6:
da:19:26:57:09:48:53:e0:48:c8:21:e6:a5:e5:98:
36:27:7b:2e:de:b9:7f:57:20:55:b8:f5:53:88:85:
6d:ff:ce:af:3d:65:44:b6:b5:41:3a:f2:77:02:76:
28:a9:63:99:16:e9:8f:4f:49:f2:30:91:88:ee:0d:
dd:3d:cb:bb:d6:3e:91:aa:7d:c4:45:5f:d8:91:ed:
a5:ac:01:53:a5:a0:75:bf:0a:ec:f6:42:a3:13:c7:
84:8e:af:71:d7:75:78:3a:28:8e:6c:84:87:c7:76:
f9:a9:94:b5:4a:e1:82:da:bc:4f:7a:8d:ed:4f:59:
90:7e:db:08:c5:32:48:39:aa:83:32:70:82:be:87:
39:ea:c8:c4:43:57:05:16:db:32:14:41:5b:37:87:
6c:41:f0:b3:71:4b:a1:f9:b6:5a:8c:d3:7c:59:11:
84:75:d6:44:36:6c:c6:12:6f:c6:50:bd:75:56:85:
b2:f3:fa:a6:7a:b4:af:6e:99:75:43:87:07:0b:43:
5e:c2:39:2f:0d:dd:8e:82:ab:8e:54:aa:06:03:7c:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:51:54:4B:A7:2B:CD:34:75:4F:EF:53:14:F3:D0:FD:23:80:D9
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6a:56:eb:0c:43:31:a9:f5:16:7d:da:fa:72:3e:35:c8:10:
22:73:4e:1a:d0:79:35:11:52:cc:a0:6f:1d:a2:94:2c:13:2e:
a3:30:1c:e0:ce:68:71:8b:25:cd:73:50:df:72:34:56:0a:ec:
e2:a9:86:ef:fd:46:7d:63:a9:68:26:14:b2:cb:1c:af:dd:7b:
59:01:10:36:a3:8f:e2:aa:f9:51:89:4d:b1:c4:3c:5b:dc:20:
9e:29:b2:14:5d:3c:5a:88:b8:48:18:1e:1d:4d:59:a7:dc:da:
55:22:4b:0a:67:37:44:4d:bb:29:ef:4f:92:b2:5e:c3:6b:54:
60:dd:b5:16:1a:73:c4:70:80:a7:7f:67:60:2e:47:7e:1e:bb:
a1:53:ec:c6:59:46:07:b2:58:9b:e7:90:08:e3:fe:0f:a6:5d:
14:ee:d6:a2:fc:a4:56:ac:18:50:fd:c9:ad:e2:c8:d5:c0:a4:
82:6b:22:00:4b:96:fa:d7:51:fc:e2:bf:0a:60:ab:74:0a:3c:
0a:ad:a5:59:e7:2c:81:a2:bb:ce:f5:85:b3:2e:38:2b:ea:43:
70:61:87:3f:fa:5a:97:7f:77:85:ec:95:56:4d:e8:77:ce:40:
b4:b4:d2:d1:5e:9e:c7:28:c8:73:bf:fd:4c:87:89:d1:56:7c:
87:bf:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:21 2025 by rpki-client