Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: Oq9uOP4o1e+rfqZiFMLNdbKrkHC47xrN9UcBzvLKDg8=
Subject key identifier: 67:2B:CC:96:B5:11:C9:AB:9A:22:50:99:7E:E2:32:06:7C:CA:5C:A0
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019769CF010094478750EF71D98756B9BFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0AB8
Signing time: Fri 13 Jun 2025 15:01:03 +0000
Manifest this update: Fri 13 Jun 2025 15:01:03 +0000
Manifest next update: Sat 14 Jun 2025 15:01:03 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: 1fv/5dQQpkManMcRmilsWwHC526XdfIjVipGS5o5N2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:01:00:94:47:87:50:ef:71:d9:87:56:b9:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Jun 13 15:01:03 2025 GMT
Not After : Jun 14 15:01:03 2025 GMT
Subject: CN=672bcc96b511c9ab9a2250997ee232067cca5ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:0e:9e:15:56:c7:3e:c9:bb:7b:eb:e5:4e:
df:61:83:41:94:e6:01:a5:16:97:9f:2c:98:49:17:
46:e3:65:4d:a1:3c:f3:4e:98:8f:c4:23:e8:cb:12:
2a:d8:08:8e:d7:d1:ff:9e:59:e8:ca:e0:0d:59:f4:
f1:e2:58:af:c3:5f:84:9a:a4:5b:f8:6f:b4:ec:e9:
81:7f:b8:42:30:b7:7e:8f:32:22:60:c9:75:8e:4b:
ad:06:7a:ba:04:e7:76:56:47:f0:c9:68:55:50:07:
65:45:6c:08:42:99:26:d9:29:f9:bc:4e:14:83:30:
fb:a6:4a:1e:5b:8e:0c:e0:eb:a4:2a:c5:b0:d8:eb:
d5:31:a2:af:8c:6d:86:7c:4c:04:bd:4f:b7:e1:04:
28:8a:91:54:4c:3b:57:2b:b0:1f:36:f3:b2:59:64:
9c:03:95:47:4e:45:0a:a4:5e:7d:86:e7:0d:4a:1a:
c8:19:78:f2:fc:e6:47:0b:38:ba:c4:d5:e3:56:82:
a6:5a:fe:40:a2:b8:56:1a:fe:7c:36:6a:a0:b0:e6:
8d:72:27:91:c6:b3:1a:ca:e5:fc:ae:1d:fe:ad:a6:
83:25:79:18:77:89:1f:29:ad:2b:64:53:e3:72:ff:
65:b9:3e:bb:6a:b1:b9:ff:8c:b8:82:19:14:6f:38:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:CC:96:B5:11:C9:AB:9A:22:50:99:7E:E2:32:06:7C:CA:5C:A0
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:33:e6:e7:46:15:84:35:c0:2c:b7:27:f1:d5:20:92:8a:
bc:78:34:d3:53:4d:e2:bc:0f:49:92:a6:0d:98:6d:b0:bc:55:
d6:ab:21:53:ce:f2:87:c4:8d:80:e8:25:b0:b6:93:f2:3e:fd:
4e:46:b3:ae:e1:03:37:df:00:a2:1c:63:e0:cd:9c:a4:ad:82:
64:6b:71:3d:b0:c8:dd:5e:96:b0:20:bc:63:2e:4c:47:e5:d8:
56:5d:e8:4c:96:ee:b2:73:fd:75:42:81:03:89:1c:26:7f:7a:
b8:cb:c0:e0:99:85:ee:21:59:f8:fe:c7:57:7f:bd:5c:21:f7:
ff:a8:43:09:9b:3c:a5:cc:93:4d:c8:fb:7d:e6:59:d9:63:e6:
21:88:92:bd:81:eb:9d:69:44:d7:9d:1b:78:f5:0b:4d:98:2a:
2c:88:bc:79:85:40:b4:7c:e5:ab:79:4f:71:eb:b2:15:3b:74:
c7:b1:c2:cd:d3:58:8f:e3:97:30:fc:11:78:af:d9:1f:15:be:
fc:a2:89:a7:3b:df:bf:39:8f:1e:80:e9:f5:45:0e:e2:73:97:
db:98:e5:1a:09:de:2c:f7:1e:61:d5:a6:1b:0b:55:e2:7e:8c:
c7:99:f0:11:00:0d:3a:98:1c:66:a6:8a:e7:f1:4f:20:42:0e:
7f:40:46:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzwEAlEeHUO9x2YdWub/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmIzNTAwNWQzMDIyODA0NDM2ZDcyZGMzYzljODY1Y2Zh
YWEwMDMwHhcNMjUwNjEzMTUwMTAzWhcNMjUwNjE0MTUwMTAzWjAzMTEwLwYDVQQD
Eyg2NzJiY2M5NmI1MTFjOWFiOWEyMjUwOTk3ZWUyMzIwNjdjY2E1Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsOnhVWxz7Ju3vr5U7fYYNBlOYB
pRaXnyyYSRdG42VNoTzzTpiPxCPoyxIq2AiO19H/nlnoyuANWfTx4livw1+EmqRb
+G+07OmBf7hCMLd+jzIiYMl1jkutBnq6BOd2VkfwyWhVUAdlRWwIQpkm2Sn5vE4U
gzD7pkoeW44M4OukKsWw2OvVMaKvjG2GfEwEvU+34QQoipFUTDtXK7AfNvOyWWSc
A5VHTkUKpF59hucNShrIGXjy/OZHCzi6xNXjVoKmWv5AorhWGv58NmqgsOaNcieR
xrMayuX8rh3+raaDJXkYd4kfKa0rZFPjcv9luT67arG5/4y4ghkUbzgpgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcrzJa1EcmrmiJQmX7iMgZ8ylygMB8GA1UdIwQY
MBaAFCtrNQBdMCKARDbXLcPJyGXPqqADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgt
ZjE4ZmJmNTk2ZWJhLzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgtZjE4ZmJmNTk2ZWJh
LzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7cz5udG
FYQ1wCy3J/HVIJKKvHg001NN4rwPSZKmDZhtsLxV1qshU87yh8SNgOglsLaT8j79
TkazruEDN98Aohxj4M2cpK2CZGtxPbDI3V6WsCC8Yy5MR+XYVl3oTJbusnP9dUKB
A4kcJn96uMvA4JmF7iFZ+P7HV3+9XCH3/6hDCZs8pcyTTcj7feZZ2WPmIYiSvYHr
nWlE150bePULTZgqLIi8eYVAtHzlq3lPceuyFTt0x7HCzdNYj+OXMPwReK/ZHxW+
/KKJpzvfvzmPHoDp9UUO4nOX25jlGgneLPceYdWmGwtV4n6Mx5nwEQANOpgcZqaK
5/FPIEIOf0BGtg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:06 2025 by rpki-client