Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: 3pdv8lxdga1l0Sk9efoa3walDIuSpbHxEWIJ9b0TWiI=
Subject key identifier: 25:86:BC:AB:9B:2C:4A:26:A0:C9:43:6E:66:0C:46:9F:08:7F:FB:6F
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019644E90568417C129C71E6509A7DC97D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: C5
Signing time: Thu 17 Apr 2025 18:00:44 +0000
Manifest this update: Thu 17 Apr 2025 18:00:44 +0000
Manifest next update: Fri 18 Apr 2025 18:00:44 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: 68BnShPqiFA6u8Z2FgRLL1QxfTJtjazUbvymEpA/nVE=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:05:68:41:7c:12:9c:71:e6:50:9a:7d:c9:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Apr 17 18:00:44 2025 GMT
Not After : Apr 18 18:00:44 2025 GMT
Subject: CN=2586bcab9b2c4a26a0c9436e660c469f087ffb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:c8:04:ba:2b:c6:3e:fd:ba:42:85:d5:6a:
d2:07:7a:dd:db:ed:0f:d3:46:4a:7e:98:01:24:b6:
8b:dc:82:72:90:1a:ec:56:4f:22:4a:47:7f:ba:16:
e2:69:21:73:55:cb:b3:cc:0c:9b:ed:eb:e0:2a:0f:
e5:a7:48:9a:0b:dc:b9:20:cb:f1:4e:fb:ed:3a:35:
ee:58:73:d7:e9:06:c6:0d:83:3e:1a:1c:cf:17:91:
58:8d:d7:db:1d:6a:09:b6:86:7e:be:40:b3:f2:87:
dd:d8:23:20:fa:03:c8:7d:1b:20:20:da:7e:c7:8e:
1a:ff:da:84:70:9a:af:06:d6:38:d5:bb:f3:fd:43:
15:3d:7b:b8:6c:d6:c8:79:4e:cb:cf:d8:8a:23:a7:
7b:17:75:33:29:04:07:12:b0:a2:8d:75:fc:01:1d:
ce:c3:f4:64:7e:c3:54:3f:4d:b0:41:1a:a3:b7:5d:
89:e3:21:86:86:d7:14:6a:82:b5:f4:f7:09:89:96:
0d:bb:2c:c9:ad:95:36:7e:11:77:4a:e4:85:f4:2f:
cd:73:ba:a8:7a:74:4b:20:8f:e1:72:0d:52:8b:88:
d8:7d:40:32:41:4a:5f:0c:e2:69:33:86:c7:25:0a:
45:80:1e:94:f0:e7:c8:72:d6:01:7b:8d:18:9d:9a:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:BC:AB:9B:2C:4A:26:A0:C9:43:6E:66:0C:46:9F:08:7F:FB:6F
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:73:05:ba:bf:81:b3:11:ce:73:e5:66:97:73:3c:ab:c6:3f:
82:bb:6c:c4:bd:5d:3d:1c:57:1c:70:93:14:4f:88:a9:f7:d0:
5a:2e:49:ba:4a:05:12:60:fe:ea:22:24:cc:d5:58:35:ec:db:
7c:6b:36:6a:d0:5f:d1:e6:30:c5:20:af:7d:e4:22:04:55:2f:
4d:b8:71:d1:10:84:aa:52:a8:28:1c:5f:c0:2e:70:f0:27:33:
db:d0:8d:8e:65:ce:89:ee:0f:93:1c:d6:cd:fa:4d:53:2d:97:
54:3f:63:9e:11:89:42:72:ad:af:52:ab:70:8c:d9:bd:14:a0:
1e:8c:78:d0:0e:d9:f3:6d:ab:8f:46:50:98:e1:65:e3:cb:4e:
70:7a:14:0c:56:89:ec:f2:94:52:7a:85:ca:26:63:81:d9:8f:
1b:4d:2f:22:6c:99:ea:a7:fb:d2:fb:55:25:95:ee:28:10:33:
ca:19:14:08:66:63:4e:46:a9:7c:c1:9c:8d:1b:7e:2a:c9:6b:
b5:6d:a9:03:cb:c3:71:dd:d0:88:2a:f8:e1:4e:d2:b1:0d:82:
df:1a:89:3f:f7:77:29:a4:d6:bd:9a:03:74:64:c3:a1:5e:84:
c5:ba:5a:3b:e9:fb:29:53:3e:3e:fd:27:dc:ad:a4:b1:c7:f5:
2e:fd:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:27:09 2025 by rpki-client