Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: GQL6SE/NVuol7RYA6CGa7SAyZkWmXUVZ09PVONyk0Is=
Subject key identifier: 9A:CA:88:CC:0B:15:4E:3E:42:39:A7:82:8E:03:1B:E8:67:C3:2F:51
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019748FA65360A6E44072E6824E5470C6D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 152B
Signing time: Sat 07 Jun 2025 06:00:58 +0000
Manifest this update: Sat 07 Jun 2025 06:00:58 +0000
Manifest next update: Sun 08 Jun 2025 06:00:58 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 8Z3ABLaz5frYXuHpE5FPAFdGNQNA7QjlKGQjsY2rH2k=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:65:36:0a:6e:44:07:2e:68:24:e5:47:0c:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Jun 7 06:00:58 2025 GMT
Not After : Jun 8 06:00:58 2025 GMT
Subject: CN=9aca88cc0b154e3e4239a7828e031be867c32f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:7b:66:eb:69:42:3a:74:2d:75:0c:eb:a6:
e8:7f:d7:22:3c:1d:f3:84:95:6c:8c:9f:ff:9f:b2:
6d:71:0f:10:52:7f:02:d1:cf:9f:ee:a8:b4:ce:20:
b6:a8:cb:a2:24:86:fa:e4:70:1c:bc:a9:82:a3:dd:
85:74:5c:30:9f:8d:f5:13:28:06:48:ac:9e:85:40:
e7:72:3d:4d:7c:e4:4c:50:53:9a:18:cd:6f:ae:33:
40:2f:3b:17:1f:6c:d0:f4:83:ae:f9:e9:95:5c:58:
ce:70:6b:84:8c:b1:aa:3d:e4:a5:41:fe:f9:81:25:
54:86:e0:cc:63:5e:6e:a9:4c:a5:1e:a8:af:df:a8:
ad:ed:a7:ca:3a:1b:b5:23:43:37:02:a8:ba:cd:75:
e5:83:e2:bc:3e:4b:26:e9:30:6c:87:e1:4f:92:cb:
ff:9c:ef:24:cb:3b:88:92:68:3e:ac:c4:0f:4e:e6:
86:0a:e6:27:96:52:3c:84:9c:1b:36:28:c9:c1:b8:
92:28:09:93:0e:c3:51:37:e7:13:84:a5:68:40:60:
5f:61:81:8a:2f:95:5c:fa:46:e1:2a:4a:ec:fa:76:
04:0b:8e:eb:5b:1f:45:3d:cd:85:09:65:76:e2:5e:
77:62:b5:3d:cd:55:f7:dd:92:de:02:f4:e4:e3:48:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:88:CC:0B:15:4E:3E:42:39:A7:82:8E:03:1B:E8:67:C3:2F:51
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:40:91:52:7d:b8:79:38:76:ff:9f:f2:b8:1d:a3:86:91:
81:5d:d6:f0:13:a8:a6:3c:df:76:36:ba:dd:da:11:17:55:21:
26:a9:32:23:f5:fd:4f:06:ca:14:66:8a:69:fa:52:e9:14:78:
ab:eb:c8:1d:3a:e1:1d:50:9c:46:3b:51:5d:d8:1a:37:1d:f3:
ba:98:5d:d4:92:60:b7:bb:c6:0b:76:18:af:aa:7d:3c:c5:7f:
ab:97:80:1d:7d:94:9e:16:55:fe:f6:5f:a0:87:85:cf:c2:08:
74:91:db:19:8e:b0:bd:04:51:90:f8:16:65:4b:80:8b:18:71:
f3:4a:3f:62:75:f6:3b:1b:03:2c:e7:d1:48:24:3d:6f:82:2a:
6f:2c:7f:f1:ba:64:94:75:3a:b1:71:b2:7d:25:ae:71:4f:2c:
96:5f:11:91:51:c7:b5:f2:d9:ba:b1:cf:cc:91:9d:f2:75:29:
dd:72:ef:33:b1:a6:2d:7f:3e:2d:9b:59:91:92:7a:cf:67:97:
1c:3d:db:71:4d:60:63:e6:40:a5:6a:47:93:6f:e9:8b:3c:54:
de:41:b2:57:4f:be:3f:f2:e2:af:12:22:2a:a8:88:fa:4a:5d:
5b:db:8a:b6:d7:33:9a:86:2d:ae:db:6e:7d:be:f6:52:41:f1:
8e:4b:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:09 2025 by rpki-client