Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: Fwk8oX2Enwrx6clpwbyfO1MkaEIhxs5jAmHs8PTZu64=
Subject key identifier: 4C:33:EB:DA:88:61:F9:0B:3E:70:EC:5D:06:12:17:73:29:B6:0D:9B
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019768BBC99B02DE8F1CC6436084EBE63AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0D59
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: DTXi0qU7814Dh3fytSO5VaG5iSreSH/a/MOTQbevWOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c9:9b:02:de:8f:1c:c6:43:60:84:eb:e6:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=4c33ebda8861f90b3e70ec5d0612177329b60d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:d6:0c:ca:60:a2:20:90:03:71:93:9a:7c:
c3:2c:d1:b3:e6:8c:72:26:96:58:c6:3e:a2:c1:40:
1b:ce:dc:a3:1b:e1:d9:30:13:e2:e0:34:ab:50:96:
45:ed:94:c3:0b:ad:fa:66:28:12:7b:37:52:09:d7:
db:aa:3f:f0:b1:5a:d6:a2:21:0a:19:a1:3a:e7:1c:
97:b2:6c:f0:66:e1:7d:f5:7c:fc:9a:49:20:27:87:
63:9c:b6:b2:0e:f8:1a:0b:54:2f:b9:f6:19:ed:28:
90:b5:38:01:a8:d0:86:26:59:5e:9c:2b:d3:ea:65:
bc:e9:a9:2a:02:d2:a6:ca:53:c1:96:92:e1:3a:8d:
15:6e:29:28:e0:cc:a3:55:ba:0b:4e:a3:1e:ae:47:
a7:41:be:75:a8:c6:91:bc:3e:d8:f6:c8:6f:d5:fd:
47:40:f9:98:34:d1:1e:f6:be:54:b1:38:33:27:52:
c2:44:78:63:61:f2:42:b6:f1:6b:9c:e7:f5:bd:57:
5d:22:fe:de:b2:ae:a4:c0:78:a6:cb:bf:2f:57:4a:
cb:8b:0f:cb:98:70:07:c9:e5:a4:58:fc:9b:63:08:
1a:54:87:77:8d:d4:7c:e4:5c:2b:32:53:61:43:de:
7e:e5:2b:3d:a7:b6:6d:ed:55:62:56:76:99:21:25:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:EB:DA:88:61:F9:0B:3E:70:EC:5D:06:12:17:73:29:B6:0D:9B
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2f:37:fe:e0:cf:dd:ea:05:43:4b:92:3f:55:fa:3c:18:d4:
c8:1e:26:ff:63:4f:a3:52:78:62:ac:a3:2e:db:4f:0b:bc:20:
4f:8c:f7:04:af:25:eb:79:c0:7c:dd:92:c0:59:3c:3a:a0:d2:
75:55:f7:89:89:f5:cf:ff:fa:ca:f7:e9:cc:92:cf:5b:f4:18:
17:3d:82:2e:6e:77:91:7e:66:f1:20:c1:0b:33:f2:b0:23:4e:
96:bf:91:a5:f1:d9:5f:6f:3f:73:12:e1:e9:d0:da:69:3b:01:
7b:97:8b:64:21:b6:9a:00:72:26:c5:ec:46:30:20:66:2d:00:
37:f2:d8:0a:2b:cb:49:87:4a:ed:b5:78:aa:3e:29:ba:78:08:
9d:7a:78:1e:bd:88:2e:4e:ab:f4:a1:42:1d:71:e7:2c:9f:e6:
f1:16:e8:02:c1:08:63:3f:26:bc:55:c1:66:15:78:95:a5:37:
35:af:56:90:14:f8:c1:34:1c:08:81:5d:b7:1e:9d:a4:a2:5c:
93:ed:37:ae:5f:aa:2c:e4:a7:b2:ad:24:68:e6:f2:3b:fd:44:
db:59:c3:6d:8a:e5:c0:6c:8f:8a:25:3e:0c:e4:8a:49:e9:13:
54:92:b7:60:7c:c0:0e:cb:79:7a:c0:06:f2:b6:76:53:55:f6:
65:3c:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:50 2025 by rpki-client