Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: OBsdi2MjfFGbGWbb0TBzBaa7a9SOqI0aT29OJ6Z61WY=
Subject key identifier: 8A:85:7F:B2:7F:E1:BF:09:69:86:38:8B:36:8E:BB:74:D5:FB:5B:29
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 01964DEC66C0F90AE2EDDB39E87620F041A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0532
Signing time: Sat 19 Apr 2025 12:01:00 +0000
Manifest this update: Sat 19 Apr 2025 12:01:00 +0000
Manifest next update: Sun 20 Apr 2025 12:01:00 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: oRUUJmVlneUflLK2jp8fwPbSHKUKLz56DDgkTr4KaK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:66:c0:f9:0a:e2:ed:db:39:e8:76:20:f0:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Apr 19 12:01:00 2025 GMT
Not After : Apr 20 12:01:00 2025 GMT
Subject: CN=8a857fb27fe1bf096986388b368ebb74d5fb5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:82:e2:3a:16:e6:8a:0d:32:24:43:a3:ba:
fe:72:d7:8a:23:39:6f:41:6f:4a:2a:cd:f0:d0:c1:
94:5a:ec:2c:73:eb:8f:7c:7a:b0:27:24:fb:1c:1c:
f6:99:84:0e:d4:a0:a8:2f:2e:d2:90:20:93:a6:5e:
38:c8:b1:e5:12:8c:bf:12:86:e8:65:59:8b:27:cc:
86:81:74:08:e3:22:f4:83:54:5b:0a:6e:5f:2a:b0:
e8:75:78:e6:91:5b:fd:79:ac:ef:10:f8:b9:2e:3d:
4d:58:67:89:dc:22:51:af:c5:c7:f5:ef:6c:8d:78:
a7:f1:22:be:89:a7:af:70:a7:44:9f:5a:90:1d:69:
56:80:21:af:fb:12:69:90:70:ef:71:8a:af:93:66:
06:94:0d:92:23:ef:e1:f1:e8:8f:8d:06:fc:f5:5c:
07:cd:d2:8d:c3:d6:56:2d:eb:8f:26:58:5e:74:3f:
a1:54:48:a7:d6:fc:af:85:eb:80:f2:fd:35:d1:f3:
ac:87:fc:85:0d:16:09:35:d7:fd:74:ec:31:b9:2f:
fd:70:d0:83:38:eb:a1:53:f2:34:d5:27:cd:9f:a9:
4b:96:28:a9:a2:59:b0:a2:07:d8:44:27:a5:72:03:
2d:db:e5:2b:f9:07:7a:56:ec:df:50:a7:03:66:77:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:85:7F:B2:7F:E1:BF:09:69:86:38:8B:36:8E:BB:74:D5:FB:5B:29
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:c5:ab:47:df:e8:fa:8f:b6:14:00:82:b0:9d:14:9b:d9:
ee:43:96:05:3c:ec:97:7c:97:78:a9:86:af:42:de:9e:e0:ad:
5b:3d:aa:92:5c:aa:3f:7f:24:f3:12:fe:41:ad:9a:28:be:7b:
4d:74:82:ef:4c:39:98:df:ff:5f:22:6f:58:0f:81:29:13:bf:
0a:53:02:d1:bb:93:93:91:b2:61:65:16:0a:37:0c:c0:e5:d1:
61:77:5a:88:c4:1a:71:07:28:f7:c8:1e:ce:e2:37:61:d6:1f:
6c:0a:6d:c6:1f:c4:31:27:6c:64:ac:97:cd:d8:ce:6f:b4:dd:
c8:2a:a1:47:c0:d7:58:c7:89:d9:9b:a4:cd:2e:ef:5f:2a:d6:
9b:7f:93:6b:ac:1e:44:40:80:ae:6b:90:d3:5b:ff:da:ce:00:
cf:32:12:08:d2:97:cc:6e:b8:fe:fa:69:09:99:b6:bd:58:db:
07:0a:44:9c:9a:59:16:75:cc:34:69:f6:1f:25:17:6b:06:57:
bb:cd:8c:fa:44:3e:ab:93:0e:d0:85:7f:9f:0a:76:8d:5b:3e:
b7:d6:6e:b5:72:80:46:e0:55:5c:7d:7a:1f:21:95:0c:19:f3:
3c:6a:2f:d7:6a:a3:f3:1d:d5:80:55:57:41:d6:a8:2f:09:16:
1f:cf:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:57:16 2025 by rpki-client