Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: rQZUtkdLxciI3AUbiDDR4AF5z9YCWQRefjeI3AwiA8o=
Subject key identifier: 2D:AB:70:9C:4B:77:F3:AF:69:66:03:B2:2C:90:E3:3F:E0:06:AC:14
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 01974667337EB640D29CB8C3CE374347A114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0350
Signing time: Fri 06 Jun 2025 18:00:57 +0000
Manifest this update: Fri 06 Jun 2025 18:00:57 +0000
Manifest next update: Sat 07 Jun 2025 18:00:57 +0000
Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: uE8Hr+gZmfo6vIRSHHGZsoLMezCiodPZqnkmMNuN/LU=)
3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:33:7e:b6:40:d2:9c:b8:c3:ce:37:43:47:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Jun 6 18:00:57 2025 GMT
Not After : Jun 7 18:00:57 2025 GMT
Subject: CN=2dab709c4b77f3af696603b22c90e33fe006ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:73:76:49:d1:b1:ca:1b:de:b1:7c:96:25:
83:f6:e1:49:7c:23:da:5c:53:cc:62:09:4f:54:3a:
64:6f:d9:65:2c:e4:c4:68:a0:24:b0:ca:70:6a:b6:
37:ab:8e:af:f6:5b:d4:1b:ee:85:bd:b8:13:ff:4e:
e9:d0:4c:cb:ed:de:e5:f6:70:f3:5c:8e:c8:90:b7:
2f:e8:21:0c:47:21:f6:a1:5c:85:7c:43:bc:d7:9f:
20:57:22:ee:5f:30:99:29:ab:ec:55:94:0a:6f:25:
15:ee:57:6f:f8:2a:d6:bf:66:b8:16:25:49:65:69:
69:a8:b7:38:42:8e:7d:77:0b:e3:7d:33:e6:0f:ae:
49:1f:3b:e2:54:be:f6:7c:0e:59:04:da:e3:87:5b:
e6:d0:6e:7a:ec:36:43:3a:fb:f0:42:be:9b:de:59:
cb:4e:8f:35:09:68:6e:2d:68:e2:00:07:2a:33:2c:
3c:e0:4d:47:92:90:b3:42:09:c8:f5:fc:28:43:78:
6f:62:3d:9c:9b:4f:91:48:f6:99:0e:14:e5:c7:e2:
4f:8b:86:fe:fe:9c:97:a2:ee:1b:b4:e5:0d:e5:93:
fd:e2:bf:4e:44:3d:b8:df:21:9f:fd:1d:b6:d6:d9:
50:76:b7:db:78:4b:0f:bf:06:20:d5:6c:af:51:d0:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:70:9C:4B:77:F3:AF:69:66:03:B2:2C:90:E3:3F:E0:06:AC:14
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:c8:9a:2c:a1:69:3e:18:76:08:40:6d:6e:66:ba:fb:90:
33:cb:69:e5:be:85:ac:9e:60:3c:34:c5:96:51:70:09:9a:47:
52:2c:1b:f3:3c:71:85:4a:e1:83:e7:23:97:a7:0c:35:1f:1c:
9f:1c:84:0c:10:99:95:67:cc:d5:99:a2:a7:0c:19:8b:1b:ff:
5a:1f:74:fd:9a:8c:64:c6:a3:78:39:d6:b3:df:9e:c0:ad:9a:
3c:8d:17:46:03:9f:3b:97:50:d2:09:20:82:5b:06:9e:30:50:
76:c6:cd:9d:48:8c:a2:ad:0b:cd:54:08:af:f7:17:17:a4:83:
6b:6a:e4:51:79:b9:84:55:1c:84:24:10:68:a5:df:d6:ac:7b:
9b:f6:8d:0d:b0:7d:49:d7:ed:01:ab:22:9c:74:1c:c9:dc:10:
72:2c:1e:70:fa:95:19:4c:c1:50:8b:f6:ca:b7:05:d2:7e:f4:
49:8d:7b:e0:bf:3c:55:b8:b2:97:54:25:49:34:0c:46:67:f3:
65:16:35:50:aa:d2:d2:20:2f:e2:05:24:82:60:bd:d6:6e:5e:
0f:93:f8:46:d2:1e:03:8a:be:ec:91:12:2d:48:c9:18:9e:ae:
f2:5b:71:d6:e0:11:a5:f4:14:6d:df:47:e4:e3:0a:08:59:a5:
c1:b4:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:18 2025 by rpki-client