Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: EeqcJbGuQaoAL8eGbOXgGBOu2r3l7AlOONUONHiymcU=
Subject key identifier: BD:94:DC:47:90:99:32:7B:D5:A2:DA:AB:42:B1:99:BE:C9:0D:B7:3A
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01976A05E10E1F3721C2B3F40DBEF0E73B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:59 +0000
Manifest this update: Fri 13 Jun 2025 16:00:59 +0000
Manifest next update: Sat 14 Jun 2025 16:00:59 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: yIPXTk6Cg8jYKYnZorTItjXmbIP7ZM8kfVj2zu1uHwg=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e1:0e:1f:37:21:c2:b3:f4:0d:be:f0:e7:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jun 13 16:00:59 2025 GMT
Not After : Jun 14 16:00:59 2025 GMT
Subject: CN=bd94dc479099327bd5a2daab42b199bec90db73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:4e:d7:d8:02:77:1d:d9:41:0f:86:5c:fb:
14:7d:87:fb:6b:08:d2:fc:97:40:ec:5f:15:ed:c2:
39:f7:a9:52:40:77:83:9c:c6:de:5e:c5:14:7d:10:
d0:5d:37:cf:3e:34:93:d6:cc:51:43:ee:05:11:4d:
11:17:f9:3d:8d:38:fa:57:0e:83:69:81:f3:bf:0d:
c6:43:6a:b3:4e:db:94:2c:75:6f:66:50:c1:92:77:
42:59:02:ff:e0:a8:25:8e:3c:5b:81:05:ed:0c:27:
58:54:00:b3:0a:65:ef:c6:3a:73:fd:00:6e:84:2a:
d5:7a:15:08:08:fd:7a:1b:d5:42:0a:97:0b:a6:97:
b3:00:65:9f:d6:8c:77:ce:6d:05:5d:c0:22:52:86:
b0:48:38:68:a8:b6:c4:94:0e:82:62:85:09:83:17:
06:2d:9e:66:62:e1:f3:ce:f4:08:7b:d1:23:38:42:
98:df:11:e6:2d:47:dc:aa:48:45:5a:c5:e3:6a:99:
f7:fe:09:41:25:a0:64:a0:48:d1:21:82:5c:a4:4a:
66:09:10:39:13:b0:85:a8:5a:ce:ea:f8:8a:fc:9c:
70:12:6a:6d:5f:10:28:cb:b8:f2:4d:ea:12:8e:e0:
a8:fc:7b:b5:9e:b0:e9:b8:61:56:b7:df:c5:dc:2e:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:DC:47:90:99:32:7B:D5:A2:DA:AB:42:B1:99:BE:C9:0D:B7:3A
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:13:3f:0c:50:04:17:c4:62:65:47:1a:7a:fd:04:96:b0:
52:f3:77:74:3e:a3:14:7d:86:f8:ca:aa:c5:f1:67:ba:87:56:
be:b6:f7:d3:7c:4a:8e:e5:69:38:84:85:a8:af:5d:3d:ae:92:
90:d0:4e:5f:6f:e5:ee:84:34:23:45:1e:a5:1e:4f:27:4c:5f:
86:19:d8:ec:da:e5:51:23:fa:71:73:19:db:1f:10:0a:0d:44:
d7:ed:45:15:5d:0e:59:bc:ca:63:9d:a6:26:52:7f:e0:bc:50:
db:2c:34:ed:5a:ee:92:98:e5:73:d8:3b:64:44:f8:45:92:93:
74:51:d4:20:74:34:01:60:d9:ff:e5:b5:73:98:64:e9:1b:0c:
df:af:67:9c:0d:ab:f8:e5:65:83:23:dd:ca:5d:fe:a0:e6:61:
e6:55:fe:7b:82:fc:0a:24:74:0d:4b:95:54:d4:ed:b0:7e:99:
04:66:d8:f1:77:58:d2:c0:8f:3f:4c:c1:ab:b3:ae:4a:1f:d9:
93:80:a5:c9:93:ac:fc:24:60:e6:be:9b:8a:6b:f7:38:1e:7d:
df:bb:e9:cc:73:63:04:cd:8b:74:4a:52:9f:f9:9f:a6:8d:c4:
ac:dd:4d:33:a6:5b:5e:7d:1a:9d:42:35:54:99:d6:19:b5:0c:
38:0f:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:01 2025 by rpki-client