Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: DOcC7CctziKqbhKQYK6/3FNrOKMMYtU7qG2VpDrMJro=
Subject key identifier: B9:BB:C9:DF:5B:49:A2:06:B3:93:55:1C:C0:4B:6D:AC:80:C8:7D:6C
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 01976A05D0539030E245EC3344BFB5E4130F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 123E
Signing time: Fri 13 Jun 2025 16:00:55 +0000
Manifest this update: Fri 13 Jun 2025 16:00:55 +0000
Manifest next update: Sat 14 Jun 2025 16:00:55 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: mbvv+jfPbwkHbPrtnVsTMJKpOCediAH8bb5a8fchhd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d0:53:90:30:e2:45:ec:33:44:bf:b5:e4:13:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Jun 13 16:00:55 2025 GMT
Not After : Jun 14 16:00:55 2025 GMT
Subject: CN=b9bbc9df5b49a206b393551cc04b6dac80c87d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:74:00:9e:a7:49:57:00:7e:51:ba:08:dd:
3e:1e:ee:ac:9f:d3:23:80:80:10:d8:11:05:24:3e:
42:87:73:9b:7c:1a:6f:38:69:8c:13:cc:20:89:1d:
18:7e:de:4b:4d:42:bd:86:9f:25:0b:09:c8:02:cb:
3e:f2:67:f5:02:af:c8:fa:3f:99:b6:d7:09:96:1d:
72:99:1d:41:96:3d:eb:10:71:bb:c3:46:61:b9:c8:
7b:05:02:fa:ed:20:2a:58:d1:a3:fb:fd:38:74:32:
62:7d:1c:3f:46:8d:d3:55:2b:21:5f:0a:07:25:99:
be:be:0a:f9:9e:37:a2:94:fa:1a:b9:8f:80:c9:6f:
90:04:7e:f9:10:93:01:92:a1:14:4e:2a:4d:25:04:
92:eb:61:98:e3:b6:09:27:87:c8:e8:ec:56:9c:6a:
26:50:98:19:39:72:16:e1:6d:e6:52:94:7a:8f:a7:
21:4a:a7:34:67:c6:ee:c0:15:58:ec:27:74:75:ff:
ca:49:6c:cc:ba:4e:9b:78:0c:e9:77:9b:9f:bc:a9:
e0:88:60:32:54:ca:81:13:b5:93:1a:e4:13:18:ea:
3b:96:10:68:74:cb:81:1c:cf:ce:35:2a:78:93:f5:
bc:f4:c1:1b:35:62:92:29:40:e9:89:38:44:f5:6d:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:C9:DF:5B:49:A2:06:B3:93:55:1C:C0:4B:6D:AC:80:C8:7D:6C
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7c:a8:62:9c:3d:b6:c5:fc:07:9f:f0:32:72:76:5b:9c:ed:
38:d0:63:ee:7b:4a:d9:75:f1:c4:84:5c:20:8b:c3:fc:f1:5d:
d9:d5:2a:f0:69:71:e7:32:5f:1c:1d:13:dc:6e:8c:c2:14:1c:
2b:2a:7e:a8:01:1f:d0:f9:87:1c:0b:5c:00:d6:90:42:7d:75:
5b:f9:ab:3e:4c:5c:c9:8b:71:a3:58:02:b0:67:ed:9b:a5:a3:
64:9c:9e:55:9c:6d:7f:a3:95:75:9c:c6:3a:ec:af:48:ec:71:
53:36:7c:71:d2:22:7f:af:79:f6:fd:e5:68:9a:a1:4c:05:b9:
b1:ec:05:5a:ab:f2:70:62:38:14:f9:c5:c8:a1:ea:de:f5:7d:
27:28:53:85:a4:c9:5e:c6:32:78:34:24:ad:36:e7:0f:05:34:
1a:aa:50:16:b8:19:e8:83:2e:0c:16:e3:9f:06:37:15:4a:c6:
16:02:83:9f:62:84:20:70:3d:da:8d:a3:84:d2:8d:97:76:e2:
18:b8:5c:ff:81:6d:38:43:15:63:1b:a8:aa:63:5f:05:dc:b7:
6b:e2:1c:05:46:3f:8c:9f:8d:51:50:9b:9f:ed:25:87:f1:36:
a9:f8:b5:27:69:51:c5:9e:b1:d4:9f:ce:af:30:90:47:24:0f:
9d:4f:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:06 2025 by rpki-client