Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: hicvd+2MCRCC4eqGE9u08bjO4CCvZIFTl2DX/9n8Vyg=
Subject key identifier: 5B:E2:0D:22:44:83:37:28:50:B4:5D:06:31:E0:57:4F:00:7B:59:72
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019849D2F5717B19B529FA5027BA341C7B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0B2C
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: MxMRD4dd/sfQWjSlbPn6T96s4t0hKDvbSyoz5Q1RY9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f5:71:7b:19:b5:29:fa:50:27:ba:34:1c:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=5be20d224483372850b45d0631e0574f007b5972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:55:2a:58:44:5a:c8:47:05:47:ea:71:80:
d9:b1:63:c1:23:cb:bf:29:c4:2e:f3:13:dd:69:75:
a8:e5:f6:29:59:02:48:b4:63:bf:c1:81:69:ea:a5:
71:ce:56:b2:7c:ee:b5:2c:1c:e2:d9:ec:bd:cf:9a:
5d:8e:fa:b7:68:6b:f4:7a:9b:3e:7f:86:4e:b7:89:
ff:8f:cd:8b:f4:e5:07:bc:08:b6:3d:65:5a:3e:d4:
21:5f:9b:20:29:27:5a:ff:61:cd:04:2e:9d:8b:d1:
89:41:4a:61:cb:92:32:44:f9:03:9f:d5:e9:3d:7a:
38:34:3d:cf:2b:d8:df:7e:36:c5:e5:12:0f:af:ba:
06:07:7c:39:4e:8d:73:d2:f1:51:07:d8:55:24:91:
b1:16:65:d2:73:42:f2:f8:ac:c8:32:1c:45:b1:ba:
c6:92:df:85:87:71:f3:e8:17:bd:96:83:6b:08:f0:
9f:36:58:13:c2:60:2d:b6:ee:cc:ab:1b:69:60:fb:
5a:76:a5:c9:35:cf:33:36:09:d8:e1:96:69:3d:26:
a0:bd:9c:8a:82:29:8c:f5:42:42:0b:20:44:00:28:
3a:ec:92:91:a8:ce:b4:e1:7e:43:f2:24:b8:b4:c9:
57:90:9c:ba:0a:88:1b:19:5f:9c:1d:44:4a:6e:d1:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:0D:22:44:83:37:28:50:B4:5D:06:31:E0:57:4F:00:7B:59:72
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:d5:11:84:c9:69:c3:e4:e2:4c:9b:fe:43:d7:e2:25:d7:
6b:a0:ba:bd:b3:49:63:ad:24:c5:43:8f:d3:6f:89:96:c5:bc:
fb:85:90:82:2a:ff:cb:a3:ed:74:de:17:ad:e6:e7:38:0f:f9:
37:2b:0c:b0:3f:98:c7:91:13:39:68:f1:63:5f:91:d5:6d:aa:
14:87:0c:bb:16:7e:11:cf:87:7d:85:a4:bd:5a:d5:55:b7:62:
c6:16:3e:17:b9:0a:f3:9c:9f:36:28:63:d2:9b:22:05:d2:e0:
5e:b8:40:32:8f:51:e0:1a:c1:ed:50:71:1d:1f:90:c9:5f:14:
28:5b:31:d5:88:ae:3c:68:24:a9:ca:85:93:72:78:f7:e1:c5:
1d:03:0a:53:25:bb:d9:76:33:30:79:b0:e5:e3:34:78:44:c7:
ad:e5:91:32:f6:68:2e:1d:4f:02:b8:04:f1:33:75:aa:be:cc:
12:99:a7:a7:b9:1f:2b:35:1a:2c:79:55:f6:31:48:97:80:2a:
7c:bf:41:69:9a:20:e4:dd:a1:52:a1:79:bd:10:45:75:ca:01:
9d:0e:18:71:df:bc:e8:0a:76:ab:b0:eb:c0:73:82:ee:8d:1d:
ac:ce:b8:a5:82:26:54:ae:76:99:42:65:7f:9f:dd:ca:70:5f:
37:fa:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:01 2025 by rpki-client