
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: G+jXZuwSLUX36lfKXJQayu3SdQcalTIa4sMJZGx91Z0=
Subject key identifier: 1F:0D:5B:CD:F2:82:2A:E1:32:D7:1B:42:96:0F:C1:B0:37:96:1E:09
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 01976BF4140A64AAEB7CE9E72F0270E7972F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 0357
Signing time: Sat 14 Jun 2025 01:00:47 +0000
Manifest this update: Sat 14 Jun 2025 01:00:47 +0000
Manifest next update: Sun 15 Jun 2025 01:00:47 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: SZmbGeSBL2I0zLcXb8YZ+mz4QWGdLEUribAFENB2dtM=)
2: sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa (hash: vP2EAWCKtEv68Ix4O5DKWgGMPVW5lFga8QKrSKSQB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:14:0a:64:aa:eb:7c:e9:e7:2f:02:70:e7:97:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Jun 14 01:00:47 2025 GMT
Not After : Jun 15 01:00:47 2025 GMT
Subject: CN=1f0d5bcdf2822ae132d71b42960fc1b037961e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:27:25:f0:ed:24:d4:a3:8e:6e:6d:55:d2:
98:55:e2:52:14:cd:9d:a6:8b:22:75:1f:7a:77:5e:
2e:13:00:db:80:4f:13:00:58:b8:b8:a4:41:e5:d3:
af:b0:cd:de:29:52:77:34:9e:a2:00:7b:71:c3:1f:
d3:47:ee:2c:0d:10:57:8c:89:7a:1a:f2:1f:79:b4:
39:33:ae:93:00:78:b2:87:74:88:cc:6d:55:20:b3:
5e:9b:9b:cc:38:a0:db:01:af:4b:08:cf:d3:40:08:
7b:4b:d7:51:6e:8f:74:6f:90:06:d5:67:0e:69:7c:
d4:39:5e:0c:1e:31:68:09:39:28:f7:8d:2b:f9:a0:
41:8d:73:d5:e7:32:34:7a:10:74:c9:5f:06:07:09:
89:9c:84:b5:98:cb:7f:65:d3:39:37:0f:5f:99:ab:
06:bc:c6:32:5b:61:c6:67:bb:c8:13:9a:45:3b:47:
c5:36:07:62:32:64:7b:bd:c8:1f:66:a9:9b:45:2a:
c3:c2:69:0a:4d:ac:44:6b:74:69:d7:a8:15:99:70:
de:44:ad:ee:cd:7c:8e:4d:6e:ad:b2:b3:c1:6c:a8:
2f:9e:14:16:43:e4:5f:2b:4e:fb:2c:05:42:2e:3c:
87:34:b5:7b:0f:19:ef:60:40:90:17:9f:11:c4:9b:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:5B:CD:F2:82:2A:E1:32:D7:1B:42:96:0F:C1:B0:37:96:1E:09
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:ef:3b:f4:a1:04:20:c5:8b:6d:f0:82:de:f5:48:e1:a1:
01:1c:35:84:03:a4:11:0b:15:40:29:63:32:e1:a5:20:29:88:
10:c9:ea:46:78:5e:98:84:ce:ca:66:64:8f:3a:9b:8b:5e:6b:
1d:b7:d5:a6:d8:e8:1b:87:2b:52:2e:35:5b:96:21:6a:d5:e9:
35:99:cf:0a:79:68:ee:1e:ee:35:09:ba:99:f8:a3:2d:35:5d:
33:0a:e0:67:49:23:2f:48:10:9f:c9:dd:5c:3f:60:04:c5:b5:
59:d3:11:3f:15:8f:58:4c:9b:90:32:9b:08:7a:b7:fc:48:59:
23:3b:a3:0b:18:4a:46:0b:36:e4:67:53:24:e1:e6:f5:5b:ce:
3b:bc:a6:32:09:10:b3:5f:a7:df:57:2f:01:40:07:5d:9c:b5:
34:67:89:a4:63:4b:7a:9b:ac:7d:35:ee:aa:e0:cf:da:a2:5b:
75:32:be:50:15:74:af:a3:fd:89:2e:c0:d9:e7:82:f6:70:6c:
85:a8:cb:a0:80:58:fd:7a:ff:38:a4:d3:e6:83:7b:8b:70:dc:
f3:96:15:47:f2:08:6d:85:33:f1:e9:0b:48:1a:60:e6:73:df:
fb:0e:44:1a:b9:a3:ac:b7:7d:b5:4c:39:76:26:6a:7d:28:e6:
2e:40:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:13 2025 by rpki-client