Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: G5RjyiMxGjOqcHrImWbuqzFZ1GzRORqUjhimp8nxkmk=
Subject key identifier: 5F:DE:F3:66:56:32:15:48:A0:3A:37:FB:0C:64:CC:11:DC:42:E9:8F
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 01974A43B64DDF4A9DC4047EAE230EC4CCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0D35
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: CZJmME8PFyxK9lmiB/QLcx3nmAP9BPLa3ovp1LiUSV4=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b6:4d:df:4a:9d:c4:04:7e:ae:23:0e:c4:cc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=5fdef36656321548a03a37fb0c64cc11dc42e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:8d:c9:ca:36:d0:52:73:75:9b:80:fd:0f:
5a:4c:0f:67:ca:62:87:0e:77:96:57:35:2e:32:a4:
8b:c0:a7:d2:cc:fa:e7:61:19:05:ee:23:60:dc:89:
6f:87:43:39:8d:d7:8f:b4:4f:9b:2b:f2:c3:fe:9b:
2f:56:76:65:bf:65:12:12:84:5d:e8:9f:cf:5f:96:
77:a2:11:ef:a4:9c:d7:de:57:b1:c7:a1:81:a1:fd:
2d:65:c0:f8:da:0f:f4:50:94:c3:4f:25:a9:56:10:
50:e4:e7:7e:27:c7:d3:a4:02:3d:ec:38:d3:ad:9d:
31:e2:b6:ab:b5:ef:ac:f4:51:09:61:33:6c:bf:c2:
ed:b0:87:4d:d2:40:eb:9b:cd:c9:07:c6:d2:d6:c1:
21:8c:0a:d5:af:7b:96:2f:bf:7f:bd:e9:48:0b:ed:
fe:35:09:c3:fe:35:4f:86:67:73:a7:cb:e4:63:a1:
95:12:69:18:7c:e9:ed:59:4e:0c:c0:32:7d:d0:26:
bf:d6:7a:91:7f:ec:d4:41:53:d6:ca:40:f8:50:5c:
ea:40:5d:bf:19:65:b3:ef:1b:5a:66:ca:68:94:11:
5d:01:19:36:cd:52:85:77:c7:35:61:f5:dc:8d:55:
19:d9:48:f6:c6:27:7c:48:13:da:6e:0e:5e:8a:9f:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:F3:66:56:32:15:48:A0:3A:37:FB:0C:64:CC:11:DC:42:E9:8F
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:a0:13:04:16:e4:14:06:02:c6:53:97:fc:4b:6f:5c:b7:
13:62:8e:58:42:5e:9a:fd:95:30:21:0d:49:51:51:a2:68:5f:
00:b8:7c:41:a5:b1:64:c2:04:1b:e8:fe:8e:c2:1c:1a:ec:4c:
2b:ea:d4:84:61:6f:95:76:7a:73:36:b7:b3:8b:01:b9:cb:c1:
12:af:33:0c:87:6e:64:4c:9d:ce:8e:57:ae:9b:cf:3b:d8:53:
3b:e4:64:29:2c:3b:67:83:a5:85:7c:9c:e7:16:f0:50:bf:3d:
9c:5f:64:6f:78:b2:36:ed:0e:0d:20:cc:5f:8d:41:4b:df:94:
4a:8f:07:4e:d9:76:66:9c:90:7f:13:0d:7f:53:ff:3d:ac:1d:
82:a9:e6:ea:0a:48:8f:f4:5a:18:06:72:c7:95:54:f8:a0:9e:
a8:57:6f:f1:37:dd:ba:d6:dd:07:bd:fe:66:66:fb:ff:16:bf:
88:99:cd:c9:d9:d9:52:5b:67:b0:a1:a8:3c:6f:eb:bb:f4:7f:
a7:d6:53:35:da:a1:81:fb:71:0d:fc:26:8e:9a:c4:79:1b:43:
f2:f9:bc:d5:94:5c:80:fd:ef:1a:86:70:25:61:cd:b4:d5:a2:
1f:27:25:3d:14:f3:12:97:d8:79:eb:35:e0:48:5c:49:40:42:
27:bc:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:28:44 2025 by rpki-client