Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: pZWVevLhJNwplc89Oic+WoW1tp2oFi1MyoxmzCzD2i8=
Subject key identifier: 2C:97:74:4D:EA:3B:BD:09:A6:A9:38:D4:85:DA:40:EA:72:AE:BE:02
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 0196786917B8B6BAF694AF7DAD153C5A8261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0548
Signing time: Sun 27 Apr 2025 18:01:15 +0000
Manifest this update: Sun 27 Apr 2025 18:01:15 +0000
Manifest next update: Mon 28 Apr 2025 18:01:15 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: TKp/KyHtnM4Cg9Dni6IDPVJYSxowmwv9yzLQ1WI9Ljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:17:b8:b6:ba:f6:94:af:7d:ad:15:3c:5a:82:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Apr 27 18:01:15 2025 GMT
Not After : Apr 28 18:01:15 2025 GMT
Subject: CN=2c97744dea3bbd09a6a938d485da40ea72aebe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:3b:63:a5:64:ce:d4:0d:fc:84:56:33:73:
9a:f3:c6:2a:2c:ee:dd:52:99:98:bc:fb:45:90:80:
81:75:89:03:7f:9a:65:fc:d5:06:66:00:c2:80:81:
2b:a2:3b:f2:5d:14:81:78:59:df:9a:00:7b:a0:20:
f2:93:44:17:b3:cb:08:53:f4:11:f3:27:61:2a:30:
57:3b:d0:72:a5:d3:39:c9:4c:93:27:2f:1c:8d:15:
8e:13:aa:83:07:b5:c4:30:8f:0d:a9:b3:75:3d:83:
61:40:a3:8a:01:d3:6b:bf:d7:8a:95:19:e0:3d:df:
17:a0:40:6e:21:58:77:f6:7e:6c:2f:9a:41:0f:5c:
1b:f6:90:4a:f7:32:31:14:5d:be:f2:1d:03:e6:c0:
0f:97:d9:1c:bf:d0:2a:49:5f:f9:86:25:23:7d:a6:
6b:00:29:ff:65:2b:a1:c7:9e:2f:91:96:ff:07:59:
17:06:e4:cc:23:11:4a:c8:9a:61:78:6f:3f:2e:8d:
0d:74:28:ab:83:da:7e:eb:28:04:2d:a9:72:c6:da:
b5:4f:08:24:e7:e0:4d:44:0a:9a:96:27:0f:2c:8b:
e3:ce:8b:06:bf:1b:60:31:44:26:90:a8:aa:af:97:
8e:b2:e2:ba:c9:d5:de:8b:9f:d9:42:bd:3a:31:1f:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:74:4D:EA:3B:BD:09:A6:A9:38:D4:85:DA:40:EA:72:AE:BE:02
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:d1:36:25:4a:71:68:74:e9:4d:f5:f4:d7:24:06:ce:4f:
0f:51:e4:ce:d2:da:b7:f2:31:58:d9:e6:88:1e:04:15:14:26:
03:70:e1:00:ca:6e:81:26:88:66:9a:7d:d7:ac:07:7e:84:60:
7c:19:f0:6d:0b:0c:ff:05:32:5d:5a:e2:98:08:3b:be:ad:6b:
3c:34:fe:5b:9e:cc:59:12:26:47:4f:b6:5d:bb:6c:09:12:db:
e6:b6:ed:16:5b:79:c8:36:b7:3f:72:92:8e:2a:63:83:1f:4e:
f7:8f:ce:fd:97:7e:c6:69:74:d9:7c:9c:27:b2:5f:a0:73:28:
a3:aa:ce:aa:6b:c8:1a:e8:91:e3:d0:d8:dc:e0:6e:d4:ca:a8:
60:9c:91:2a:e0:6e:0c:19:6e:0f:39:73:a7:66:31:59:fa:10:
6f:c0:bc:9f:5f:8e:ed:4a:08:bd:06:ea:14:79:be:fb:e0:54:
ef:f5:1c:6e:df:29:d0:f5:c5:c6:0e:0d:f2:e0:44:fa:d2:9c:
fc:89:8d:ba:dc:58:1a:74:88:aa:a7:83:72:7a:7a:76:c4:30:
70:3a:ab:32:3f:1a:fe:ee:b6:bf:73:5e:ff:ed:e9:0e:27:ea:
bf:b6:89:c6:cc:5a:18:0a:5b:f4:32:44:2b:8b:79:0b:d0:90:
8d:d3:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:24 2025 by rpki-client