Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: vAxAd9hZHCF2vq3ltDeTxI6l3D5/uahpr6rjcDBcIUQ=
Subject key identifier: A0:10:14:15:F4:40:39:81:0B:5A:0C:8D:84:7F:43:8A:F8:B4:32:53
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 01976D748F5254A74D217E77D1CBA2446E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 02F5
Signing time: Sat 14 Jun 2025 08:00:44 +0000
Manifest this update: Sat 14 Jun 2025 08:00:44 +0000
Manifest next update: Sun 15 Jun 2025 08:00:44 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: WS3AGlbBv3ySYF/4DJq6p9D7yeyFOYScjGCJ+I4Icck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8f:52:54:a7:4d:21:7e:77:d1:cb:a2:44:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Jun 14 08:00:44 2025 GMT
Not After : Jun 15 08:00:44 2025 GMT
Subject: CN=a0101415f44039810b5a0c8d847f438af8b43253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:97:2d:82:3a:d1:87:bf:05:db:05:e0:e7:
1a:a2:2c:03:86:72:73:ea:e3:ba:66:51:76:0e:db:
17:02:d9:a3:98:c3:21:22:c5:5c:e4:48:e0:c4:57:
f0:4c:eb:ea:98:11:13:09:92:cd:7c:5e:94:4e:3d:
69:30:66:34:1e:4f:f3:b3:fc:cd:8a:21:40:9e:14:
ed:22:a4:7e:8c:c3:79:81:f4:59:ec:3d:58:d2:cd:
de:b9:4a:57:46:62:23:56:a9:dc:c9:e2:17:98:bd:
4c:76:c1:41:17:8a:c8:e1:c7:18:a0:43:06:45:28:
28:c0:b1:6d:83:ce:8a:ee:ed:0d:c9:10:ee:c9:e1:
49:28:f9:b4:b3:0e:2d:02:a2:de:b4:90:3e:5c:67:
00:b4:9f:62:ba:23:6d:69:e7:fe:a7:12:e8:15:60:
87:f3:6b:89:72:80:07:23:b4:b5:14:9c:1b:fa:8a:
62:c4:7e:52:24:81:a5:ee:4c:98:7b:5a:25:6d:dd:
23:42:db:96:a7:94:1e:41:92:c8:55:34:e3:a1:6b:
60:68:3e:e6:93:e8:4b:32:e1:e9:19:87:d9:0d:43:
88:c7:48:4c:b9:4d:c3:76:9e:58:d1:79:c5:dc:3f:
d1:a1:92:b9:25:e2:a5:62:fa:bd:93:ac:65:e5:e7:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:14:15:F4:40:39:81:0B:5A:0C:8D:84:7F:43:8A:F8:B4:32:53
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:7f:5a:c8:9c:bc:89:d8:81:47:5a:d5:6a:e9:01:98:e7:
86:7b:02:ae:b8:c9:b2:97:14:34:4d:9d:e4:c9:a8:05:bd:d1:
f8:49:f8:e7:2f:74:f4:5f:90:24:55:3c:fa:e8:75:e5:ef:e5:
27:fd:5a:ea:74:a7:b1:fd:f1:fd:0a:93:25:b7:d2:ed:02:88:
fb:2c:7a:14:47:2d:61:d9:e5:ca:85:11:56:f6:4f:b3:ec:24:
2a:38:2d:ef:7c:a8:e2:63:b0:96:59:19:8b:6d:de:71:90:21:
23:bc:8b:2d:ee:29:e4:a5:71:e9:51:69:59:38:27:91:3e:be:
2c:62:00:15:bd:97:2b:67:b8:6d:e5:75:7b:22:e5:7b:28:c8:
7f:6e:61:04:97:03:d9:7c:2c:cd:cd:fc:d3:02:7f:d8:83:46:
04:41:b6:dc:86:83:5b:9a:9e:47:a8:70:73:49:90:87:79:e0:
90:86:1e:58:4d:0b:37:3b:e2:b4:cb:f8:60:ff:4d:06:fb:33:
ac:63:ee:54:1c:52:2c:e6:62:16:5b:ca:09:d2:c7:fe:95:d5:
c2:e8:bd:12:72:8c:74:3b:23:17:81:18:1b:c5:05:3b:a7:c3:
0a:0c:4b:9e:d6:12:0b:9e:32:21:48:0e:04:34:f9:a0:ac:26:
50:ce:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:31 2025 by rpki-client