Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: 5yiRmLmm2zXN2r6pIH4/C9ASoLT2qDM3rMB+/1GQVMw=
Subject key identifier: 75:22:7F:60:66:26:C0:28:A1:F6:25:85:3D:04:19:E7:5F:70:1F:0B
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 01976D74869DFFC9E7C265346AD9F7DEA966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 09E5
Signing time: Sat 14 Jun 2025 08:00:42 +0000
Manifest this update: Sat 14 Jun 2025 08:00:42 +0000
Manifest next update: Sun 15 Jun 2025 08:00:42 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: ROYx6MkL7hJz1LoGBM5XUMWkz2Wv60X4x1Ot9nF2+x0=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:86:9d:ff:c9:e7:c2:65:34:6a:d9:f7:de:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jun 14 08:00:42 2025 GMT
Not After : Jun 15 08:00:42 2025 GMT
Subject: CN=75227f606626c028a1f625853d0419e75f701f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:c9:94:54:a5:38:d4:1a:54:e9:8b:93:85:
8d:ff:28:75:a4:93:0d:c7:87:ce:9f:69:14:6e:a2:
3d:98:89:c3:8a:30:dd:78:f4:50:94:52:34:bb:24:
d3:fb:df:33:fa:e2:68:6d:b4:44:c5:f5:54:b2:0e:
38:2b:00:cc:11:7d:31:28:e8:ec:74:5f:a0:78:e6:
10:3b:31:52:11:72:f4:e3:a0:94:fa:e7:f3:f7:f6:
8e:20:75:59:76:97:b5:91:21:34:38:83:eb:d1:68:
39:23:e6:b1:02:8b:ae:62:e0:61:a4:ca:74:df:dc:
1b:bd:09:95:84:f6:8b:f5:66:c5:34:b1:9e:1c:ea:
93:75:d4:b9:6c:2e:32:0a:e1:ca:83:7b:dc:bd:77:
51:c4:e7:59:8b:76:08:a0:39:6a:a1:dd:b3:69:72:
f8:b4:6f:7a:dd:be:d1:f7:86:cd:67:39:c8:67:16:
38:5d:91:a0:5f:9a:c1:07:0c:79:a8:45:6f:5a:38:
ba:76:36:49:71:9b:b1:2a:b2:ea:a8:b5:fb:d3:d2:
bc:49:1d:d8:fd:e3:81:33:17:3a:ca:4c:98:05:87:
73:d2:81:2a:ef:cd:e5:d9:cd:ca:ff:5f:de:f0:1e:
20:a7:df:21:f1:aa:3e:be:2e:f4:9a:dc:de:db:71:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:7F:60:66:26:C0:28:A1:F6:25:85:3D:04:19:E7:5F:70:1F:0B
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:e1:2e:4e:f5:27:47:78:85:c5:c2:90:c3:80:c7:d8:1c:
ae:2c:63:de:7d:55:ef:9c:e0:ce:b9:77:df:f9:97:97:56:25:
4c:3f:2c:e4:41:fe:0a:9e:76:82:19:ee:3a:38:2f:13:85:04:
be:9e:05:23:1d:5e:20:1b:b5:22:8d:78:e8:7d:3e:10:86:2e:
48:5d:69:97:2b:24:f9:49:de:39:f7:d7:ee:c4:dc:31:bf:a7:
5d:e9:42:c4:08:23:29:c5:73:56:f5:2f:4d:4e:cc:30:1e:86:
c8:02:6f:e2:08:32:b7:59:9c:76:0d:be:64:fc:6a:60:d8:e1:
ad:73:5c:e1:a9:b1:3d:18:bc:a6:c2:83:97:b7:51:17:85:76:
16:f9:f3:9b:70:2e:c8:73:df:64:7c:8f:ca:27:1a:6b:3d:a0:
83:12:aa:5d:b6:ba:8f:d3:21:c2:45:22:31:dc:79:92:65:04:
11:b4:88:1e:be:27:12:c0:8f:ac:f2:24:c0:bf:15:13:6f:46:
aa:62:72:38:e9:8f:ce:d0:d9:ae:f9:4b:8e:56:58:bf:e9:cf:
38:22:a4:97:85:03:63:72:05:40:7a:e5:3b:fa:a2:70:7b:f6:
8f:bc:d4:c3:70:ec:39:90:f3:87:14:68:60:83:40:cc:89:54:
19:cc:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:35 2025 by rpki-client