Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier: 129egptMnbHK8eEAOyd3q6w1gUxK88TeNJZw6s06X7I=
Subject key identifier: 46:5A:9E:4E:D8:F8:A1:EE:1D:4B:5C:41:0C:3D:BE:BA:68:22:0A:A9
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial: 019749D5EC04CCC3DCA4D5ED0429341FA9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number: 0D92
Signing time: Sat 07 Jun 2025 10:00:45 +0000
Manifest this update: Sat 07 Jun 2025 10:00:45 +0000
Manifest next update: Sun 08 Jun 2025 10:00:45 +0000
Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: LaJmGmrteqCyu1k6oRrYlMgJjffb330p1FKexTIxxzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ec:04:cc:c3:dc:a4:d5:ed:04:29:34:1f:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Validity
Not Before: Jun 7 10:00:45 2025 GMT
Not After : Jun 8 10:00:45 2025 GMT
Subject: CN=465a9e4ed8f8a1ee1d4b5c410c3dbeba68220aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:7c:06:81:de:0d:71:af:86:e1:aa:86:90:
cf:61:c6:25:7f:83:cd:6b:a3:e1:7b:71:4c:3a:b7:
19:e7:b9:79:b3:bf:f2:b3:72:6e:40:58:99:26:06:
ff:5c:43:5d:e5:a5:e9:46:df:e8:b2:95:45:88:6e:
46:ac:69:d3:f7:7e:ea:aa:cf:6e:4b:ad:15:ea:bc:
5e:2f:f2:f5:76:8b:a6:90:d5:2f:d8:0e:ee:33:5a:
02:fc:58:ad:c0:2f:2a:24:92:d0:d5:6b:d1:a9:b3:
ca:13:6d:34:9a:ca:bd:09:ae:96:3a:51:6b:97:21:
55:4d:66:dc:21:7d:03:a3:51:c9:9f:b2:89:de:28:
86:a1:7f:f2:22:5a:35:e4:ce:ea:a8:6f:db:7e:fa:
9d:75:b8:0d:ae:79:af:07:ae:3c:c9:c4:c4:76:15:
8b:cc:99:2b:1d:0f:3f:7a:06:24:bc:4c:dd:1e:3a:
0e:a8:66:42:15:82:27:0f:f4:de:f5:6d:71:9a:47:
e1:71:bd:5b:e9:17:9a:55:0e:61:a9:ba:59:2d:cb:
6e:e0:5c:63:d2:12:d0:aa:92:d2:ab:8e:dd:92:e2:
05:b6:f6:5d:7c:73:88:66:19:f7:14:30:c8:e6:e1:
2e:69:d1:ff:1e:ac:b2:32:89:dd:67:87:b7:3c:68:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:9E:4E:D8:F8:A1:EE:1D:4B:5C:41:0C:3D:BE:BA:68:22:0A:A9
X509v3 Authority Key Identifier:
keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1b:e3:27:43:66:03:7a:fb:32:42:22:de:e8:ca:fe:41:8e:
0e:b8:8f:7f:34:75:8c:41:dd:40:52:87:12:b4:bb:f5:56:79:
e3:5d:44:c6:86:cb:a0:9f:37:82:95:e5:a1:df:65:62:08:00:
9d:cf:b2:e0:ff:02:6f:8d:ec:1b:15:d5:2a:1e:e5:5d:18:13:
9b:00:70:64:7c:59:15:f9:9d:bd:ea:70:4c:f5:89:c2:43:be:
71:54:a7:10:0d:95:38:12:3e:e3:3b:78:e3:7d:ff:67:cd:fb:
19:49:6c:78:e8:61:88:f8:43:61:c3:03:ae:ed:30:e5:b6:0f:
4b:da:e2:d7:71:cd:2e:6a:b0:da:ea:21:7f:c0:83:f4:04:30:
e3:52:fe:46:ef:68:fb:81:a2:d3:90:7f:ac:5e:18:f2:38:cb:
32:14:9b:ee:e6:cb:c1:af:d7:8c:da:ba:43:af:8d:e9:bf:e2:
bd:63:64:7a:db:fc:7a:1c:2f:c5:d8:58:69:3c:66:c7:0a:80:
d9:7b:38:2b:dc:e8:09:9f:0f:38:a1:be:b8:93:ed:6f:13:2f:
3d:23:80:b0:57:db:9b:a4:c5:04:e0:9b:df:b5:93:d8:82:f1:
6f:0d:c5:11:cc:71:43:b1:6c:5b:14:c7:07:7d:37:a8:67:d2:
9c:75:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:40 2025 by rpki-client