Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: jhJ1XphwNs5+qM8yCreImXB+1LgrutCTXur0rmZC1A8=
Subject key identifier: C8:63:5B:E8:02:8F:95:F6:21:C2:80:95:5C:45:A5:99:F3:51:6A:A8
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019772D21B3F6AD540778616220F4C908030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0D4A
Signing time: Sun 15 Jun 2025 09:01:01 +0000
Manifest this update: Sun 15 Jun 2025 09:01:01 +0000
Manifest next update: Mon 16 Jun 2025 09:01:01 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: aJgVJiw+JrnCWAH2YZvAcPeqimk4rt6XpeiyoKlx7Pg=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d2:1b:3f:6a:d5:40:77:86:16:22:0f:4c:90:80:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jun 15 09:01:01 2025 GMT
Not After : Jun 16 09:01:01 2025 GMT
Subject: CN=c8635be8028f95f621c280955c45a599f3516aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:97:c7:bf:ae:49:e3:8a:e9:af:dd:ac:cf:
79:6c:d4:db:90:50:1a:bc:db:6a:d0:b1:2c:ba:4a:
a7:75:50:ce:81:6f:e7:95:38:23:74:bf:fe:3a:db:
a5:62:52:5e:8a:50:60:bc:9d:b2:d4:76:29:9a:b0:
8d:8d:b6:9c:46:4c:f5:3d:5a:37:fd:67:3f:02:9c:
6f:8c:13:d9:ce:86:43:47:3c:21:10:18:13:7e:e8:
09:41:69:7a:33:fd:92:a3:33:91:1a:38:12:4e:49:
d0:86:df:81:6f:48:dc:ad:dd:1f:b4:ed:ba:ea:e3:
63:25:56:15:2d:e9:4d:b0:cf:02:73:6e:3e:a8:b4:
30:8f:60:6f:65:d1:e8:7e:f2:da:cc:20:c4:09:80:
ee:21:ab:de:e2:f8:08:b3:9c:17:a2:e0:16:a8:e8:
ec:37:55:f2:42:6c:cd:b0:31:08:61:52:81:c7:80:
f3:96:0b:82:11:5c:0c:e9:5f:84:aa:b9:8a:eb:1e:
11:0b:ff:69:4e:ae:65:4d:3d:2a:da:25:2e:e0:c5:
d7:98:ad:ec:5d:dd:1d:de:4d:83:cc:9b:ae:a5:80:
ed:32:10:0a:a8:12:5d:0e:f2:5c:e2:43:f2:db:60:
b2:74:70:6f:ba:83:c3:f0:db:7d:dc:bb:72:63:8d:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:5B:E8:02:8F:95:F6:21:C2:80:95:5C:45:A5:99:F3:51:6A:A8
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:04:b1:3f:8d:7f:a1:3f:78:e6:20:06:ac:18:0e:7a:94:e1:
ab:ee:37:49:02:90:76:b3:1a:74:19:ad:3e:fc:41:65:0f:3f:
e1:37:33:78:a0:11:67:55:2c:60:5d:81:00:0b:1b:66:1f:00:
e8:f2:d4:31:ce:7d:81:17:32:6f:a4:5f:4e:dd:06:6b:58:d6:
2c:65:cd:80:81:68:90:01:ae:8e:99:00:f7:6b:e8:1b:83:7e:
5f:71:78:74:06:1f:db:4f:06:7a:e8:2b:91:bb:98:92:a9:2b:
e3:43:3a:38:e9:6a:bf:64:3c:5f:a4:04:a8:13:95:56:c9:97:
78:6c:3b:09:27:e6:8f:f1:d8:a9:5c:62:8b:22:53:43:15:db:
0a:4f:11:6d:1d:7e:ae:2d:c9:77:82:0a:fd:53:05:dd:de:71:
88:80:4c:08:ce:a8:01:74:a7:ea:79:94:85:04:43:84:56:55:
ac:15:1b:0e:9f:d8:43:7e:d7:ff:92:c4:42:cc:0d:85:41:0a:
cd:3b:eb:08:fa:4b:54:23:79:9e:bd:01:6a:d8:62:ac:46:6a:
6f:19:c4:70:75:0a:b9:5e:da:11:b2:39:33:a9:de:3e:0a:3c:
da:03:ae:30:d8:ea:0e:b9:45:0c:b6:da:e7:93:1b:51:46:bd:
08:61:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:10:39 2025 by rpki-client