
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: ls0Ox2FHWWcfEimo/oOvcVUCbYGikZpWcuzfcct4lEY=
Subject key identifier: D9:5B:09:9E:59:44:02:10:19:7B:78:E6:FD:B3:0D:92:60:3B:86:25
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 01974AE885F51787E1C524F3328598E9489F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 05B5
Signing time: Sat 07 Jun 2025 15:00:41 +0000
Manifest this update: Sat 07 Jun 2025 15:00:41 +0000
Manifest next update: Sun 08 Jun 2025 15:00:41 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: n7/QbD1njlvflceY2B+Q8Z4qXYxlIPEXjBrDx9nEgnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:85:f5:17:87:e1:c5:24:f3:32:85:98:e9:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Jun 7 15:00:41 2025 GMT
Not After : Jun 8 15:00:41 2025 GMT
Subject: CN=d95b099e59440210197b78e6fdb30d92603b8625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:16:8a:50:f7:66:de:83:8a:0b:4f:9f:24:
da:ad:bb:3e:01:df:e9:1b:6a:4c:d6:3b:2e:25:6b:
d1:96:65:13:f2:62:93:b8:62:19:b2:af:61:bb:60:
c3:88:e3:0a:c7:f6:4f:d4:69:c5:78:f1:a4:df:7d:
3f:ad:e1:36:72:65:a3:cc:24:c3:e2:1d:81:71:0c:
25:38:98:1e:f0:7d:9e:f0:c0:3c:d2:ce:ff:e2:73:
fa:ed:47:33:09:de:48:67:d3:20:86:e5:90:63:a0:
db:7a:27:61:6b:a4:fb:e9:ce:c7:ae:e6:1d:58:0f:
9e:eb:ba:d7:7e:18:e5:9d:07:8b:59:a8:a0:e6:b5:
2b:b1:4f:5e:e0:4e:9f:50:e9:1a:4d:8d:7b:ad:50:
85:7f:1b:29:37:f1:ad:14:29:b6:3f:cf:26:bf:5a:
40:87:c4:9c:01:b0:10:12:2c:19:2f:89:31:7a:cb:
f1:dd:1d:93:37:52:56:e1:38:02:70:dc:94:07:0e:
f3:4f:3a:ea:cf:37:22:01:90:7b:9e:1f:34:5d:d2:
8f:5c:bf:0f:11:89:ed:06:2f:6b:d6:2c:df:3e:44:
e6:3f:29:94:9e:ea:d3:b6:ad:50:15:e9:12:1a:e8:
2b:3f:74:54:51:77:71:c5:c2:35:1c:96:bc:ea:4d:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:09:9E:59:44:02:10:19:7B:78:E6:FD:B3:0D:92:60:3B:86:25
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e3:c2:4a:e7:11:93:18:82:8b:c7:04:b7:59:0a:89:2f:92:
0d:d4:36:03:62:35:70:7d:88:a7:a8:53:8f:13:bd:83:11:86:
17:2c:97:4a:91:25:5a:5d:33:d6:2a:e7:79:51:cb:9f:9b:46:
f3:c6:e5:27:34:61:6e:f4:02:46:b7:84:b0:ee:2c:63:43:7f:
a1:b7:50:83:29:3c:d4:97:9f:9d:a4:55:45:46:0e:ea:da:a0:
f3:36:70:b8:b8:d7:3c:24:b8:dc:ac:33:6f:16:70:5b:98:f1:
ab:53:77:82:8b:10:3d:6f:4c:26:f6:8d:0f:ff:9d:22:7d:9f:
ec:7c:53:1f:a8:b1:c8:24:05:87:89:c2:df:ae:ea:a4:ba:a2:
a9:1a:8f:6b:44:4b:6a:d2:b9:ba:70:73:e1:d3:e4:6f:1a:a4:
34:19:c1:68:ce:ae:10:29:a0:35:40:87:97:0a:d6:00:15:ab:
ad:14:dc:3c:d7:ee:42:4e:18:92:01:dd:ae:ea:a1:c3:5c:c4:
cf:1a:a4:87:c4:4b:07:2e:2e:13:52:5d:ca:21:6c:84:7e:f9:
98:f6:e4:ff:c9:53:39:03:62:fd:b4:62:16:06:df:8a:93:5e:
b5:12:d5:dc:de:b2:14:3f:de:bd:f1:f9:6c:51:3d:10:92:31:
22:80:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:30 2025 by rpki-client