Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: QC/RhZMQIQe8kyOPuhpoO54MY3METWJswkQ8XTMnCt0=
Subject key identifier: 20:6B:18:F6:F6:52:95:78:10:56:2C:F5:1D:5F:76:08:44:E1:3C:9C
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 019774C01829F86E1A0CE59FC37C8BD44471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0368
Signing time: Sun 15 Jun 2025 18:00:35 +0000
Manifest this update: Sun 15 Jun 2025 18:00:35 +0000
Manifest next update: Mon 16 Jun 2025 18:00:35 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: 3JTJScvk2fkPsoe4i+w6lDVcI1X19nMMlV7VPSHxJq4=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:18:29:f8:6e:1a:0c:e5:9f:c3:7c:8b:d4:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jun 15 18:00:35 2025 GMT
Not After : Jun 16 18:00:35 2025 GMT
Subject: CN=206b18f6f652957810562cf51d5f760844e13c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:31:2e:14:a9:f4:ef:f0:a5:b7:92:2f:1e:
35:49:fc:09:ab:cd:26:e8:f0:f7:40:0f:77:80:81:
78:bf:80:fd:e6:8a:75:21:d7:db:6f:c2:61:87:8c:
c1:bb:d1:1b:9a:08:27:3a:c3:96:01:6d:99:61:2d:
5f:ac:a1:76:7d:3c:3b:c7:1e:e6:b5:76:b2:4d:4f:
a9:d0:96:02:8a:4b:ee:15:be:7c:b6:05:65:06:95:
47:8e:c4:0e:77:91:09:5a:a6:21:0b:ce:4c:37:0b:
6e:1f:1b:93:71:1d:0a:7d:99:5c:8c:d2:b7:eb:e5:
d8:9f:5a:03:c3:fc:b3:c4:24:8c:42:5d:dc:7c:01:
67:0c:b1:a7:76:2b:32:0a:9a:f7:b4:57:33:3c:cd:
cf:f3:78:3f:25:b8:23:7a:4c:30:20:4d:02:bd:b0:
a3:60:92:1a:ab:47:35:80:88:81:71:d1:75:3f:ef:
e6:e0:f5:e7:18:99:17:fd:e5:b8:62:7c:d7:6b:24:
24:e1:80:a8:33:2e:5a:b5:69:bc:5a:dd:5b:ff:f8:
82:7b:38:70:fd:57:71:39:03:c4:48:15:13:26:34:
c3:d5:65:64:46:bd:12:b3:c4:24:3d:6b:c8:62:5b:
21:7c:b5:d2:e8:64:0a:8a:7b:0c:15:91:95:62:b1:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:18:F6:F6:52:95:78:10:56:2C:F5:1D:5F:76:08:44:E1:3C:9C
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:4d:9a:55:e4:da:4d:4e:ed:7b:08:d6:dd:74:13:ba:fc:
4f:80:68:75:a1:a3:cd:b1:69:f2:3a:57:23:db:be:15:f8:bb:
b9:84:00:33:0b:55:fb:8f:8c:d5:a6:60:33:da:00:8d:fd:bf:
9d:9b:86:bd:98:a4:00:35:ff:ad:fc:75:33:7c:52:50:c5:6a:
d0:b1:a8:b8:87:3f:27:c5:64:c8:f6:10:63:ac:cc:bd:bb:b0:
36:f4:49:aa:74:d6:f4:24:0a:71:48:fd:81:7d:fb:f4:0a:a7:
db:2e:77:9b:02:d4:47:d9:c6:74:34:94:58:c6:85:3a:4c:47:
2c:5f:58:e0:f0:22:e8:5c:a1:d5:55:3b:d2:74:1e:21:46:19:
ab:cc:a3:e2:56:a4:9f:e2:ba:66:35:b2:20:89:14:f9:3e:0d:
80:b2:ab:32:ee:7f:45:80:df:98:a4:6e:b5:51:f3:bc:c6:36:
47:df:c1:f4:0b:f1:32:64:9c:bc:c9:ba:01:e0:49:fd:47:36:
da:70:59:3f:d8:a1:53:74:2d:c0:92:e9:2d:ea:61:30:2f:b4:
04:8b:ae:28:8c:63:ea:34:65:ee:0c:14:66:aa:1e:4e:c9:18:
14:f6:17:0c:de:c3:51:63:dc:1b:55:01:52:fb:40:34:cf:00:
28:aa:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:04:47 2025 by rpki-client