Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File: k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier: vdRYhNotxpX3+WcTimuCvyWJQId9kCUFF2IpVQpCcp0=
Subject key identifier: 26:04:3D:02:D6:9B:89:BE:03:43:92:E4:7D:3A:65:48:2A:F9:03:62
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 0197711A4A59AADD43690A4C0D85AD71024B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:00:37 +0000
Manifest this update: Sun 15 Jun 2025 01:00:37 +0000
Manifest next update: Mon 16 Jun 2025 01:00:37 +0000
Files and hashes: 1: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: 6YZ8k7KrHKpJSnDKIz/g6SKsABSjY6bSXf3gQIC7lAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:4a:59:aa:dd:43:69:0a:4c:0d:85:ad:71:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Jun 15 01:00:37 2025 GMT
Not After : Jun 16 01:00:37 2025 GMT
Subject: CN=26043d02d69b89be034392e47d3a65482af90362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:2a:8e:bf:30:c4:d8:75:e7:44:8b:cf:54:
a7:80:ae:ca:2c:ef:b1:48:b5:81:6c:66:91:99:81:
ba:7d:62:98:10:0b:7d:b7:d8:dc:5d:9e:4a:1b:00:
28:67:9e:29:2a:20:a4:b1:43:83:5a:8f:6e:05:85:
52:65:98:dc:41:76:ca:e4:6b:11:d1:f8:23:86:cf:
fc:49:a3:3d:c1:63:5a:14:11:10:a0:5b:de:54:bf:
36:1a:c2:a5:53:c6:ea:05:c4:cd:c6:f4:41:0f:f1:
f5:89:d1:47:3a:08:f7:f6:d2:66:22:7a:e4:30:69:
fd:11:76:32:5e:61:e5:15:9c:92:d0:c0:7d:b2:12:
af:3e:e7:d7:30:00:a9:c1:20:05:0c:01:10:53:de:
f6:c9:4d:c3:6e:eb:78:fc:63:2f:2e:79:80:93:b5:
a6:bf:1f:67:e5:39:a7:90:ad:77:70:53:36:c2:c1:
97:76:73:81:4e:e7:f4:bb:3f:96:87:85:66:a8:2a:
f8:57:57:94:01:0a:43:e7:b4:91:32:b4:93:9e:a6:
fb:40:9f:76:76:89:ec:d4:fe:ca:09:19:7a:1a:86:
55:b3:08:f2:ec:0e:7e:c0:a8:f2:64:42:83:1f:87:
c4:f6:14:2e:6d:e2:f7:21:83:ce:a8:d8:f1:a9:c7:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:04:3D:02:D6:9B:89:BE:03:43:92:E4:7D:3A:65:48:2A:F9:03:62
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:a1:93:a9:b4:69:14:72:05:e1:52:6d:28:e2:c4:de:90:
a7:68:05:a2:c0:da:a9:88:0c:c2:10:39:f5:b7:30:88:a5:fe:
ee:de:04:da:00:6c:11:48:5c:3f:08:e9:28:18:a0:73:d1:a4:
d0:c6:04:0a:b9:c2:33:20:1b:d8:35:3a:f5:4f:64:7d:8c:d7:
35:11:f8:57:27:cf:2c:d2:3c:78:62:a7:92:d2:b2:c2:ef:2e:
33:0e:97:43:bb:0a:45:f4:40:a7:75:b8:23:f5:1e:01:c3:39:
7b:11:96:d4:ad:19:4f:c5:bd:63:20:58:92:68:da:a4:5e:74:
22:06:ee:3d:c2:13:03:01:20:47:31:e6:44:c2:ed:b4:6e:94:
de:6d:6e:08:18:2c:66:03:b3:da:89:79:59:9f:0c:6a:cc:6c:
0a:61:b9:19:c6:c3:2d:7e:99:7e:7e:d0:6c:03:0c:59:87:33:
f4:27:75:bd:59:76:2a:55:8b:29:45:b7:4a:51:fb:3c:37:a9:
83:06:e5:07:36:de:b6:a3:b7:a8:c9:f6:b9:d8:49:24:c0:16:
d7:7e:d4:52:58:84:38:8d:c1:f1:c0:1b:66:a6:de:ee:c3:f9:
be:a9:1a:7f:34:cd:d2:9a:86:f8:e7:76:a6:88:34:dd:81:5a:
eb:f0:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:59 2025 by rpki-client