Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: OoVEUA84n9OVE99gAA+xeO/3vq+ZkELnDTOD0FgqAv0=
Subject key identifier: DB:6D:5A:57:4F:12:69:6A:71:FF:73:B0:BE:7A:53:41:CB:A7:64:6A
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 0197499F12BD4C4438A7729D148E2133E3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 09:00:51 +0000
Manifest this update: Sat 07 Jun 2025 09:00:51 +0000
Manifest next update: Sun 08 Jun 2025 09:00:51 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: LdvHwPyc2y08OXAh/buTyWCUCV+o6HxSQMBsaITbTlY=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:12:bd:4c:44:38:a7:72:9d:14:8e:21:33:e3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Jun 7 09:00:51 2025 GMT
Not After : Jun 8 09:00:51 2025 GMT
Subject: CN=db6d5a574f12696a71ff73b0be7a5341cba7646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:78:28:1a:41:7f:ce:8f:b8:b5:8f:7a:21:
f1:28:ab:cc:94:e5:16:eb:a2:65:64:a9:8b:9f:f0:
fc:c8:81:7a:c9:3b:56:50:d8:24:75:70:9e:05:f2:
6f:ec:5b:e0:ff:8a:a4:fa:23:af:b4:7d:1d:10:5d:
f5:cd:38:24:8d:84:cc:07:42:b1:71:21:25:05:26:
dd:0d:20:74:84:c5:b4:ad:2f:7d:61:d0:cc:4f:57:
31:ee:72:86:d1:5a:a3:4a:25:94:3f:54:44:dd:1b:
2b:5a:66:b9:0d:52:35:c2:7f:bb:e8:d6:b1:d9:3a:
71:f1:0d:8e:5b:4d:a4:22:5a:65:1f:92:c4:85:6b:
93:35:de:e3:7a:58:01:d9:ff:0c:3b:fb:b4:63:8e:
00:47:42:19:16:33:b0:57:3d:09:08:14:ed:4e:17:
28:8a:81:96:68:e4:7b:1f:d6:30:7d:da:aa:d8:4b:
ec:ed:fa:d2:7c:07:cd:d2:a0:6f:db:9b:2d:4c:e4:
52:83:0b:0f:62:6c:cb:67:e1:88:ce:a7:92:6a:63:
a2:6a:79:9e:7b:2e:1f:10:5d:86:99:5a:a3:5f:37:
7a:95:c4:ee:c4:a9:ef:f6:f5:76:e0:9b:97:0c:c0:
1d:f6:8c:89:fa:9a:63:be:ef:a4:6a:d5:e2:3a:d5:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:5A:57:4F:12:69:6A:71:FF:73:B0:BE:7A:53:41:CB:A7:64:6A
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:e9:cc:11:aa:26:19:8c:6b:ea:40:92:6a:18:d3:3a:73:
4e:e0:e8:94:30:29:ae:a3:59:c5:ea:83:a9:06:1c:9e:24:4f:
11:da:4e:23:6d:1e:fa:0a:6a:01:3f:3f:9c:87:21:3b:f6:4f:
d0:ef:4f:4f:42:7e:d4:90:8f:a3:b4:fc:55:4f:70:fd:67:7d:
50:0d:71:09:3b:fa:c5:52:16:f9:52:fa:0d:7e:5b:15:a2:b6:
0c:c3:1f:fd:e9:e2:f5:55:3d:c6:9d:fb:a4:52:91:58:3d:7b:
5d:3f:50:58:37:aa:25:68:ae:86:4a:d5:64:1f:e7:cd:40:87:
7b:3d:91:73:10:b0:28:1d:4d:56:27:34:48:32:b8:a7:fb:4f:
aa:c0:82:f6:f9:12:5c:01:12:13:a4:61:ac:54:21:18:3c:5c:
ac:d8:ce:b1:b9:3b:91:a7:c4:ad:13:21:d7:02:a8:b5:77:77:
e2:9c:e4:a0:d3:8b:8a:11:cd:9f:62:b2:90:59:ad:21:5c:41:
81:b1:13:28:9e:0d:33:26:e8:3c:e0:a0:77:48:b8:d0:a5:d1:
a9:e9:ae:0f:84:dd:3c:9e:bf:4d:8e:33:38:cf:0c:f6:bf:09:
22:88:1d:fb:25:29:c5:ac:b6:4d:ed:42:fe:cc:80:62:38:26:
bc:0c:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:57 2025 by rpki-client