Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: TV144RIlnaLCwNxM4JpxdzDdei4PRrlWIhRLZthZbEU=
Subject key identifier: A4:17:9F:E2:B3:C9:F5:B6:FE:E0:E8:57:F4:1D:3A:74:50:7A:84:31
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019779E68EAD8333B8DDCFF10F7278E1F815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0B37
Signing time: Mon 16 Jun 2025 18:00:42 +0000
Manifest this update: Mon 16 Jun 2025 18:00:42 +0000
Manifest next update: Tue 17 Jun 2025 18:00:42 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: sGSdwMa/SOP1VxXT5QZbeAKjoWuTbw9vJmlnyss5vvU=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:8e:ad:83:33:b8:dd:cf:f1:0f:72:78:e1:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jun 16 18:00:42 2025 GMT
Not After : Jun 17 18:00:42 2025 GMT
Subject: CN=a4179fe2b3c9f5b6fee0e857f41d3a74507a8431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:8d:cd:19:db:cc:bc:a6:ef:29:0c:c1:d7:
c9:a4:52:13:bb:d9:02:d9:7a:82:4b:87:e6:9c:b5:
e1:74:52:6b:72:8f:b6:da:7f:7d:50:b4:6f:9e:76:
45:ae:2e:45:05:bc:d0:07:54:ee:a5:75:93:d0:3b:
94:ce:20:87:03:9b:33:c4:64:d2:82:7d:b8:b3:9c:
e0:d4:57:9e:62:b2:9a:54:11:a8:df:c7:b7:b3:12:
69:80:b9:ff:e6:84:07:39:ce:06:30:18:e3:07:67:
b2:9f:b0:3c:aa:9c:bd:c4:50:e1:79:af:06:29:a0:
be:1c:61:0a:a4:36:19:cc:99:15:41:16:02:53:d5:
d2:7a:e7:91:bd:0b:30:b4:6f:32:d9:48:55:6c:9b:
13:81:e8:68:9c:9c:c0:51:b6:64:db:58:97:a3:26:
86:05:dc:d6:39:c1:30:df:33:2b:ef:3b:f5:2e:84:
bc:9c:e4:dd:cb:4a:da:74:ce:c4:61:f7:d0:59:07:
9b:e5:45:91:9e:68:67:f6:3d:02:0e:6d:3c:40:9c:
07:11:cd:15:86:30:55:32:ad:5b:50:7a:3f:23:35:
1e:29:87:56:08:67:7b:0a:13:02:dc:ff:47:eb:93:
43:c9:ac:1b:71:f9:fa:25:f2:20:88:d5:c9:e0:96:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:9F:E2:B3:C9:F5:B6:FE:E0:E8:57:F4:1D:3A:74:50:7A:84:31
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8e:9f:55:c0:48:34:33:4c:29:b5:cd:b1:ea:d2:12:59:81:
b8:07:39:66:b4:96:42:28:d8:60:f3:a1:ad:56:77:7c:a3:3b:
53:2f:c8:c0:1b:80:31:40:b7:ae:bb:63:15:7e:5d:07:69:8a:
3a:b7:21:5f:40:e7:71:e6:10:30:4f:f3:08:f1:e7:74:b0:ca:
5d:13:4a:d9:f6:81:f5:96:82:1a:61:01:b5:9b:9f:47:35:43:
46:2d:74:98:1b:a3:9e:cd:81:a9:1c:95:b4:a8:29:a9:e4:d6:
c6:b8:35:ad:13:18:fe:b2:e5:47:90:79:7d:66:1a:1d:e8:d6:
95:20:f4:01:1b:3a:d1:4b:c3:43:8d:e0:4f:e5:4e:30:52:4b:
a5:30:d9:c8:1f:0e:8b:d9:f7:66:25:86:35:7a:b0:70:5c:b6:
ad:ef:f0:b5:8a:c7:6e:5a:b3:5e:09:b8:88:3d:3a:a6:0b:3a:
79:c5:99:a6:65:76:50:9c:18:9b:b9:c5:e5:f1:42:8a:04:d7:
88:aa:dd:d8:90:e6:06:6b:26:b0:5b:80:24:fa:b8:b1:5c:43:
46:ef:fc:03:5d:52:bd:b9:e9:e9:55:ed:c1:87:e0:28:7f:27:
ad:97:83:ce:e3:fc:0c:6c:e9:40:7f:86:7f:6a:6b:fe:a8:e9:
07:b6:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:54:44 2025 by rpki-client