Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: KOsceVHhtU44mmi+hZmmdYY0hhAw9uRXZoYbirjOV70=
Subject key identifier: FA:A5:5D:5F:F5:5A:A4:1C:EA:2A:E4:0A:34:CF:5E:51:C0:06:5C:23
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019849D3A2FE908890EE2E4D8423D532CA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0639
Signing time: Sun 27 Jul 2025 03:01:03 +0000
Manifest this update: Sun 27 Jul 2025 03:01:03 +0000
Manifest next update: Mon 28 Jul 2025 03:01:03 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: V73dbLpuYfKMG2ScNAl1BMs5rjoQzSPL2CANbTLy/GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a2:fe:90:88:90:ee:2e:4d:84:23:d5:32:ca:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Jul 27 03:01:03 2025 GMT
Not After : Jul 28 03:01:03 2025 GMT
Subject: CN=faa55d5ff55aa41cea2ae40a34cf5e51c0065c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:29:63:ed:83:95:91:e0:79:d7:c2:1e:65:
3c:d8:8d:58:b6:2a:b6:9f:7f:b8:fe:e7:c3:a6:06:
5f:1c:73:51:24:b5:65:93:17:67:44:49:78:3c:ff:
54:9f:27:8b:3b:34:af:ef:99:2e:80:0a:17:ee:ab:
7a:70:ad:8f:d2:71:d3:11:d7:56:6e:71:27:1e:e2:
e1:d1:f4:67:f5:dc:88:12:b9:dc:e3:21:a1:e2:70:
37:2d:e6:4e:65:ef:2c:03:65:88:24:33:ee:fe:19:
c7:a4:de:29:bb:fb:b7:ad:36:c3:d5:e1:10:24:3f:
dc:3c:26:d7:4d:e2:ab:bc:52:3d:e9:22:db:5b:65:
72:23:2b:2d:a9:c7:28:ff:c0:62:03:15:8e:f9:c0:
e0:b1:d9:bc:2a:58:5c:d8:ba:a4:d0:a5:75:08:96:
0d:3b:a1:b0:05:72:b2:99:b2:56:58:54:3d:58:f8:
b9:4c:34:7f:98:05:a1:19:85:54:94:5c:a0:22:3f:
22:b5:8a:15:83:97:ff:d7:c5:d9:d3:8c:ab:21:5a:
2d:af:a6:99:dc:ac:db:13:de:c5:d7:12:2a:55:9e:
60:68:9a:72:fe:44:15:20:92:1b:e8:9a:b6:56:a2:
9a:8c:64:a7:0e:e1:a9:61:d4:eb:1d:52:86:55:73:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:5D:5F:F5:5A:A4:1C:EA:2A:E4:0A:34:CF:5E:51:C0:06:5C:23
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:78:94:38:38:0e:1f:da:20:23:33:53:02:f3:0b:9a:3a:
97:32:ff:fe:2c:da:f3:53:09:2f:bc:16:cd:38:0f:b0:69:81:
c1:34:d3:b6:8e:89:62:dc:1d:53:a2:6e:60:16:dd:61:eb:ff:
a3:b4:6c:25:a5:d1:87:52:24:dc:5e:2b:55:b3:28:ba:56:e3:
05:f4:80:3a:a8:5a:c3:3d:d1:ec:96:8e:e9:fb:4e:05:23:e6:
7e:d4:e2:63:e8:3a:78:3e:42:0c:83:a5:72:c4:80:3c:4c:82:
d8:08:25:19:68:72:96:b0:36:a5:1c:f9:6d:a2:bb:92:98:e5:
aa:ec:22:bf:03:89:1b:d7:05:7c:f2:6d:01:32:ed:f7:3f:33:
dd:de:40:ef:26:77:29:31:92:19:07:a3:b1:92:ae:8f:f3:14:
82:8c:7c:90:d2:da:e2:41:bc:84:74:c3:d4:4c:09:8d:b8:00:
07:19:76:11:7c:d1:f1:53:62:1d:0d:cf:a1:f5:61:f0:86:1d:
7a:c0:b4:21:8c:07:17:74:21:51:79:91:5f:b6:b1:58:60:f3:
0d:7e:97:f5:0e:57:c7:d0:28:bc:0e:d0:6c:6c:83:21:94:a2:
79:7d:bc:fc:89:db:04:b5:34:f3:00:52:f2:00:f0:e6:02:a6:
33:df:34:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ06L+kIiQ7i5NhCPVMsoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw
ZjYxY2MwHhcNMjUwNzI3MDMwMTAzWhcNMjUwNzI4MDMwMTAzWjAzMTEwLwYDVQQD
EyhmYWE1NWQ1ZmY1NWFhNDFjZWEyYWU0MGEzNGNmNWU1MWMwMDY1YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zMpY+2DlZHgedfCHmU82I1Ytiq2
n3+4/ufDpgZfHHNRJLVlkxdnREl4PP9UnyeLOzSv75kugAoX7qt6cK2P0nHTEddW
bnEnHuLh0fRn9dyIErnc4yGh4nA3LeZOZe8sA2WIJDPu/hnHpN4pu/u3rTbD1eEQ
JD/cPCbXTeKrvFI96SLbW2VyIystqcco/8BiAxWO+cDgsdm8Klhc2Lqk0KV1CJYN
O6GwBXKymbJWWFQ9WPi5TDR/mAWhGYVUlFygIj8itYoVg5f/18XZ04yrIVotr6aZ
3KzbE97F1xIqVZ5gaJpy/kQVIJIb6Jq2VqKajGSnDuGpYdTrHVKGVXOnhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqlXV/1WqQc6irkCjTPXlHABlwjMB8GA1UdIwQY
MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt
M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw
LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZJ4lDg4
Dh/aICMzUwLzC5o6lzL//iza81MJL7wWzTgPsGmBwTTTto6JYtwdU6JuYBbdYev/
o7RsJaXRh1Ik3F4rVbMoulbjBfSAOqhawz3R7JaO6ftOBSPmftTiY+g6eD5CDIOl
csSAPEyC2AglGWhylrA2pRz5baK7kpjlquwivwOJG9cFfPJtATLt9z8z3d5A7yZ3
KTGSGQejsZKuj/MUgox8kNLa4kG8hHTD1EwJjbgABxl2EXzR8VNiHQ3PofVh8IYd
esC0IYwHF3QhUXmRX7axWGDzDX6X9Q5Xx9AovA7QbGyDIZSieX28/InbBLU08wBS
8gDw5gKmM980ow==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:38:00 2025 by rpki-client