Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: Ndrqxm3evuLzv0DUOOa/ZjKTIWDL0QF+A+424td0fh0=
Subject key identifier: 54:88:7C:98:F2:CD:B1:DC:AE:E1:F4:AC:C1:3B:E0:11:30:83:47:1B
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019654931FBCAE4FDED26B3D07D657EFEF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0CCA
Signing time: Sun 20 Apr 2025 19:00:50 +0000
Manifest this update: Sun 20 Apr 2025 19:00:50 +0000
Manifest next update: Mon 21 Apr 2025 19:00:50 +0000
Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: 5HFAxVxsec1YLLRwrFtXHKsuGxCtlW0CHcMoF7hRE+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:1f:bc:ae:4f:de:d2:6b:3d:07:d6:57:ef:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Apr 20 19:00:50 2025 GMT
Not After : Apr 21 19:00:50 2025 GMT
Subject: CN=54887c98f2cdb1dcaee1f4acc13be0113083471b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:ea:f7:bf:80:9d:36:82:12:a1:69:d4:07:
c4:c6:0e:d8:a3:18:24:84:c0:b9:b6:a4:00:df:61:
e4:9c:24:a0:9c:34:2d:70:16:35:d7:67:09:2b:c1:
50:ae:c7:0b:60:8c:29:68:f4:ac:d4:dd:7f:18:f0:
e5:f9:43:4c:73:25:1c:98:a4:50:97:31:e8:f2:65:
e1:54:73:98:67:78:3c:ff:d6:2b:71:f4:d8:6a:ad:
43:cf:3b:28:11:33:f8:06:92:96:fb:ad:07:0f:d1:
76:ef:b9:9c:b3:9c:67:b2:7c:cd:aa:a1:65:82:0a:
f8:03:14:3b:f9:55:cc:64:6a:78:0c:12:23:08:50:
65:12:79:f6:c0:5e:aa:ae:af:9b:31:48:d3:cb:06:
a6:10:4b:17:f2:a8:5b:c0:64:23:9f:4d:7a:17:43:
f3:7d:9d:08:63:24:6e:b7:65:22:76:25:17:d3:61:
10:ed:f4:a8:a5:c6:09:6f:05:7c:ef:8c:d2:0f:15:
e9:9b:ba:2a:64:86:27:b9:b6:f9:22:96:36:ef:e6:
33:65:95:7f:ad:bb:72:a0:a4:4c:8b:7e:77:16:b2:
40:d9:62:dc:c7:b5:43:72:4a:99:75:cf:e7:7a:63:
5d:e9:d6:5c:b9:f3:5d:4b:83:d1:6d:43:0e:e1:66:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:7C:98:F2:CD:B1:DC:AE:E1:F4:AC:C1:3B:E0:11:30:83:47:1B
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:7a:f4:fa:db:5f:4d:d8:15:6d:3a:5d:27:10:42:da:3f:
d7:db:c8:c6:51:42:53:c9:80:be:41:e8:d3:b0:21:79:bc:ca:
44:f0:90:f3:e5:e3:21:18:44:8f:e1:db:f7:9c:66:c1:3a:48:
ca:43:20:51:8b:98:1a:0e:67:79:25:3e:98:b6:11:7e:98:56:
40:fd:f6:14:9a:3f:b5:7a:9f:0b:fd:83:52:fe:ba:95:ce:f8:
ad:c4:1c:21:17:db:07:40:1d:9d:79:d5:bf:09:e9:b3:9f:26:
a7:d4:d3:47:40:d8:e3:14:e8:17:61:fe:af:20:b8:50:f7:57:
ed:ff:2d:d2:fb:a5:9d:a1:4f:cb:cd:4b:11:35:db:53:43:7b:
2f:77:e4:bd:e9:9a:3b:8a:e7:59:2b:30:bc:de:c0:b2:10:e6:
e0:56:17:77:8a:3c:d3:c8:27:77:52:dc:fa:0b:d0:05:a0:3a:
7c:2f:9f:b2:ea:04:9d:0c:ce:51:cd:2f:ad:b1:0a:82:ed:fd:
07:6a:06:be:87:c7:bc:7f:0b:0d:f6:48:eb:cc:63:91:6d:26:
27:d6:d8:ff:70:db:c2:3a:e1:94:a5:d5:6e:bc:2d:bd:71:00:
ee:3c:01:1b:35:c3:5b:a6:38:9b:21:33:bb:4c:b1:e9:57:8a:
87:92:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:31 2025 by rpki-client