Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: mcQGrj07E0d6NAGF3aqiQ6ufzSpe8hNhQu/5kKMBANw=
Subject key identifier: F6:C3:2F:41:CE:18:EC:E7:DA:AF:CB:C3:75:12:04:0D:95:FB:71:E3
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01974742ACD1F040866FF914E8DFECD34397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 22:00:41 +0000
Manifest this update: Fri 06 Jun 2025 22:00:41 +0000
Manifest next update: Sat 07 Jun 2025 22:00:41 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 3HNRcrat0pQpz3JEv1BtJQ1DweOsD4fPNyFCi5RJ7Kc=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ac:d1:f0:40:86:6f:f9:14:e8:df:ec:d3:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jun 6 22:00:41 2025 GMT
Not After : Jun 7 22:00:41 2025 GMT
Subject: CN=f6c32f41ce18ece7daafcbc37512040d95fb71e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:b1:57:c6:a6:90:a3:c8:33:fe:6b:6a:38:
2d:fc:fc:c9:4c:07:bb:56:1e:f3:aa:e0:4f:d8:0a:
7b:c9:f3:c2:62:90:16:30:58:e2:91:c8:d6:e5:3e:
9d:b6:35:56:a8:e1:c8:79:60:86:b7:17:85:88:66:
cd:49:7f:96:d8:03:18:4f:23:f5:7f:16:37:91:69:
d4:b8:48:1f:44:86:52:8b:7a:4a:79:0b:50:67:dc:
46:c3:3e:29:f8:c6:56:11:8e:cb:7f:13:c6:39:a2:
d0:53:d0:44:c6:fa:a2:3e:69:ff:07:a2:bd:83:7c:
45:1d:b7:b3:18:df:c0:55:98:09:d1:ff:3c:60:cd:
7b:27:cd:2a:80:8a:a6:57:1c:9d:84:79:b1:ba:f4:
47:95:4b:cf:72:e0:16:1b:57:72:9a:eb:e0:65:25:
99:5f:f3:5c:0c:01:81:c4:4e:a9:c2:b8:a8:fe:84:
03:4d:15:1a:41:06:99:ef:b3:47:56:53:07:d5:b6:
e6:1a:5a:ad:c1:ec:2d:7f:64:00:6e:e8:87:32:5e:
04:9d:36:1b:e4:b6:2b:23:b2:48:d4:0c:40:65:21:
4d:bf:82:38:85:6d:ec:36:db:6a:3e:d1:75:ee:f2:
8e:10:f0:74:55:14:f4:d3:9d:ba:e3:e0:9b:22:58:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:2F:41:CE:18:EC:E7:DA:AF:CB:C3:75:12:04:0D:95:FB:71:E3
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:95:e6:a6:4d:cf:57:ba:cb:51:be:20:1d:2b:b8:b6:91:9a:
b0:e4:9a:4e:6f:5e:bd:73:44:57:76:b8:e0:44:f1:0f:9d:74:
9a:bc:81:5f:db:41:cb:3a:b5:58:5c:4c:fe:a0:37:d4:15:d6:
bf:99:7c:ae:21:79:95:76:6e:84:0c:53:71:fb:46:d1:00:34:
79:3c:59:b8:fc:25:54:19:50:98:26:31:ad:02:2f:6b:d5:f1:
bc:9c:43:0e:0e:4e:c7:7d:e9:90:d4:ce:ff:13:45:9d:75:d3:
c2:f3:fb:9c:df:d0:88:44:6b:73:07:10:39:7b:b5:eb:82:cc:
e8:c7:7a:b9:fa:ab:64:ff:05:c6:a3:0f:c0:e9:2e:53:e7:f5:
8f:4d:16:57:84:5a:1c:80:4d:77:d9:cd:6f:f6:bf:a0:bc:fe:
89:3e:f3:6a:3c:03:ea:77:07:c1:9d:03:bb:ca:26:5f:7e:61:
a7:9e:7a:76:d1:7a:24:b1:2d:66:bf:6c:8f:6e:84:b1:9d:4a:
1d:75:b6:c9:19:2d:8c:78:38:d2:f8:bf:32:73:19:3e:dc:64:
df:75:50:40:82:d6:0c:73:c4:24:b7:e4:4f:1a:40:e5:47:f1:
5c:6f:fe:19:91:c9:df:6d:f4:4b:6d:00:b5:07:0c:15:e4:25:
87:51:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:03 2025 by rpki-client