Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: b/uruuXK6h7es9TAvdUCm1pYmiU4VUJDDw2M2ZwZsqo=
Subject key identifier: F7:0A:CA:B8:45:7A:3C:F6:8B:E1:3C:54:79:CA:A4:AA:CC:B3:99:B9
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 0196786899F45CF5AFE0130D30D115730DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0A3B
Signing time: Sun 27 Apr 2025 18:00:43 +0000
Manifest this update: Sun 27 Apr 2025 18:00:43 +0000
Manifest next update: Mon 28 Apr 2025 18:00:43 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: nNn9qMZlZ9GrTp7D2UjjNtSfaT+QW+KrKqU/BCquceg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:99:f4:5c:f5:af:e0:13:0d:30:d1:15:73:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Apr 27 18:00:43 2025 GMT
Not After : Apr 28 18:00:43 2025 GMT
Subject: CN=f70acab8457a3cf68be13c5479caa4aaccb399b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:4e:0a:a5:53:cb:90:93:f0:a3:38:28:ab:
dd:1d:ba:3b:69:0b:cc:24:49:6a:f1:bc:77:ab:31:
14:5a:81:74:d0:73:d7:aa:45:fe:2d:77:88:1c:9f:
0f:0b:5d:37:ef:64:80:3f:31:1a:0c:65:a0:bc:a8:
0a:94:00:46:f9:f3:b3:b6:ea:74:5d:44:87:94:48:
59:3b:8c:ed:b6:62:2b:c2:7c:23:91:c0:d4:fd:14:
70:d4:df:cb:05:49:25:11:2f:d3:1d:3a:b9:01:d7:
7a:5f:8f:09:44:f3:a4:47:5c:98:c6:2c:ba:a2:ae:
ec:40:cc:d3:74:f2:59:bd:66:62:d7:85:d3:06:73:
87:8e:5c:c0:34:70:32:52:ea:b1:8c:e1:99:a2:e7:
ec:3a:cd:d6:9d:e9:8d:a5:c6:8d:d0:b4:19:9e:75:
d2:6c:ae:31:da:7d:70:b4:ba:c0:81:91:42:d7:a5:
33:65:f2:35:16:f4:4a:b6:9e:20:ce:6a:a2:d1:ad:
1f:7a:b7:92:4a:12:f7:cc:84:e6:67:df:ed:15:b4:
04:87:f6:03:ae:e3:d1:96:8a:7f:e0:91:37:24:17:
5d:8f:ae:e9:d5:29:2b:e4:c2:ac:50:5d:e5:05:eb:
f0:a7:fa:0c:aa:d9:ac:f7:46:40:d5:26:1d:52:91:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:CA:B8:45:7A:3C:F6:8B:E1:3C:54:79:CA:A4:AA:CC:B3:99:B9
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:61:af:c8:b7:57:52:d7:08:f3:87:21:af:3b:46:d9:eb:
2e:1d:38:ff:ba:49:c7:00:8e:cf:94:cd:a7:7f:14:09:01:71:
c0:0c:be:09:86:29:56:12:80:7b:b3:a9:fc:20:79:fd:9d:e7:
87:71:68:27:ea:94:76:39:75:15:27:37:fc:8f:51:40:b7:d7:
b5:39:81:3b:a0:19:18:09:23:6e:eb:db:6e:d8:9a:43:2b:b8:
43:aa:8b:93:8b:a5:2c:c5:07:dd:2d:aa:7e:cf:be:e5:cd:17:
cf:f9:3a:db:6d:37:20:98:80:07:b8:c3:e4:76:0e:9c:63:d4:
61:0c:76:4e:ec:d3:16:11:f2:84:5a:43:50:2e:0f:a9:e9:71:
61:c6:25:dc:c4:e1:ff:02:a1:30:be:1f:98:ad:4d:c7:d8:d3:
dd:49:93:40:4b:ad:ed:eb:6d:7b:8a:2b:5e:3a:5d:f6:c2:0b:
5f:c2:d7:f0:18:15:ce:fc:76:f0:cf:18:fa:d1:12:4e:a5:57:
f9:53:1b:88:39:08:3f:23:05:b4:2e:fb:f7:cd:78:de:14:76:
8a:54:02:3c:0e:bd:f9:1b:45:7c:cc:96:f4:0e:f1:c1:f7:c0:
76:f9:ca:19:98:b0:a1:53:ea:d9:b5:f9:07:ea:40:83:2d:bd:
fd:45:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:53 2025 by rpki-client