Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: gqWo4jZByvYLu0iPzwiAQAWyutZ9FtUDZJ4A4gzlXu0=
Subject key identifier: 6E:B0:DC:1B:D2:28:06:70:F8:EF:B5:C1:B8:67:90:9E:0D:9E:46:36
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 01987261A31904A80515161A3BC50EF18833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0B41
Signing time: Mon 04 Aug 2025 00:00:57 +0000
Manifest this update: Mon 04 Aug 2025 00:00:57 +0000
Manifest next update: Tue 05 Aug 2025 00:00:57 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: rxhpEyy3vlaEksM5kpV3SEYeGlyzfxB1vXyr2vgEIJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:a3:19:04:a8:05:15:16:1a:3b:c5:0e:f1:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Aug 4 00:00:57 2025 GMT
Not After : Aug 5 00:00:57 2025 GMT
Subject: CN=6eb0dc1bd2280670f8efb5c1b867909e0d9e4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:19:2d:2f:6b:e5:b5:97:ee:39:e3:f5:c6:
16:0f:7d:92:b5:c3:c8:aa:d9:fc:6d:53:de:4d:d3:
fa:dd:fd:13:d8:cb:ca:0f:80:4e:c7:72:41:53:ab:
37:50:4e:ed:9f:c6:f2:4c:c2:58:b1:f0:a2:17:32:
9b:f7:07:2a:d5:46:5d:64:09:39:fc:55:da:0f:7b:
ca:ed:2b:fb:2c:c1:32:ab:6a:58:7a:58:08:cd:33:
f4:a7:92:2e:9c:50:ff:1f:e7:cc:f5:52:02:e9:43:
8c:17:36:57:50:f2:64:45:62:25:3f:7f:8b:99:e8:
9e:0d:6b:3b:80:e0:d6:f4:5e:91:25:a6:1b:34:1a:
51:17:80:da:ad:eb:7a:11:39:f8:02:83:dc:63:73:
90:3f:e6:af:37:66:f9:64:27:45:37:77:a9:73:57:
08:46:2b:2c:27:b2:4c:98:8a:62:e9:38:7c:06:3b:
ea:cf:98:a7:78:f0:37:7a:e4:e3:be:f6:ad:14:bb:
7f:0d:fa:37:1b:2e:bb:f6:b9:6f:31:a3:1a:3d:67:
c6:ca:ce:db:76:0f:b9:3e:25:dd:42:f2:21:a9:04:
7e:26:b8:ee:ef:c9:64:24:2d:60:f6:43:b9:23:31:
bb:e6:ac:e7:c2:ef:7a:10:ff:70:17:3f:09:e7:70:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:DC:1B:D2:28:06:70:F8:EF:B5:C1:B8:67:90:9E:0D:9E:46:36
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:9f:92:15:97:bd:20:6b:67:d2:a1:e2:6e:b4:67:c7:ac:
4f:1d:86:a3:53:d9:02:17:c0:47:9e:5b:e9:ab:85:cb:48:28:
23:8a:67:a8:90:85:31:b1:9d:5e:3e:72:58:3f:df:97:6b:98:
ce:ee:a8:a0:ba:35:35:29:2a:d5:c2:3f:7e:e4:bb:e6:11:6a:
88:ee:6e:c4:97:7f:9a:cd:c3:ad:d1:87:8a:6f:13:37:62:e1:
c8:4d:dd:c5:7b:fc:7d:e2:9d:9c:54:71:41:b7:bd:26:e7:e3:
7f:e0:f8:23:85:dd:ef:0d:2a:f5:a5:64:75:9c:63:49:5d:b6:
8d:f7:1d:26:b9:5c:a9:e6:5d:9d:4d:40:bb:18:cf:d6:1b:bb:
84:85:a0:cc:50:ef:5d:d7:2c:a2:21:34:24:45:69:cc:b4:5d:
8d:8b:d2:d5:11:8c:4a:4f:22:29:c5:50:e8:88:c9:4c:08:28:
b3:5b:16:fa:2a:d2:d1:b4:fe:6d:18:29:6a:7f:6d:1e:61:3a:
c2:e5:44:b7:db:79:23:85:1d:7d:c7:2b:c7:23:46:e3:df:7e:
d8:cc:eb:d6:f9:37:f6:d3:52:cc:5c:17:00:27:16:16:ad:e0:
4f:7c:26:62:09:c5:c4:fd:cb:0f:b7:7d:d7:62:75:2e:7c:56:
bb:c0:d0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:45 2025 by rpki-client