Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: 0nqO3n6Q/54l7B67K/p4j5NLS4HglOOumd8Nexg4ASg=
Subject key identifier: 24:A2:DD:1D:59:11:CB:1D:5B:F0:70:E5:8C:F2:D6:A1:B5:E5:62:9D
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01974AE86FAEC6BFF9704840A350FC1845C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:36 +0000
Manifest this update: Sat 07 Jun 2025 15:00:36 +0000
Manifest next update: Sun 08 Jun 2025 15:00:36 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: dwxwhS4BebedQXVNyuxvLlPJF4N/xd8xZA2oS+3MEwk=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:6f:ae:c6:bf:f9:70:48:40:a3:50:fc:18:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jun 7 15:00:36 2025 GMT
Not After : Jun 8 15:00:36 2025 GMT
Subject: CN=24a2dd1d5911cb1d5bf070e58cf2d6a1b5e5629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:64:c7:a3:7c:7d:c1:fd:98:c2:1a:87:ba:
75:9f:ea:8c:9a:22:b9:e1:4b:df:fc:30:e4:a6:55:
61:5e:ed:58:46:b1:86:8d:78:36:2c:5d:f2:76:8b:
47:a1:ef:0c:e4:1d:e6:20:eb:89:ad:10:95:ca:ee:
ea:43:ec:79:0a:9c:e0:bc:1a:4d:93:2a:65:14:5c:
9b:81:bc:9a:71:42:b0:e8:a2:f3:03:07:5e:73:ce:
33:2d:94:b2:cb:f2:78:61:60:46:e9:1b:1d:d0:db:
2a:df:dd:f5:af:71:e2:1c:e1:47:ab:98:46:66:fe:
a1:8c:22:6c:d3:24:60:42:b6:4e:06:1c:3e:5c:81:
06:93:cf:80:dc:0d:f5:38:d5:59:18:80:73:dd:d1:
05:5c:1b:4b:c7:fa:39:66:e2:62:a5:a6:99:5e:0c:
12:5b:4e:e7:11:16:c5:17:1e:b2:22:d8:64:a4:01:
9b:d3:c4:ce:ef:28:88:5f:10:92:13:5d:be:33:62:
38:df:f7:7e:e6:2a:4b:49:af:bd:43:b1:80:6c:4a:
14:74:c8:cf:a9:a6:10:48:8a:92:5f:a0:eb:dc:80:
70:3a:61:a3:86:ba:66:dc:a6:ac:00:61:95:65:81:
ab:16:a1:26:43:a2:8f:d4:c1:62:61:0a:c5:18:09:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:DD:1D:59:11:CB:1D:5B:F0:70:E5:8C:F2:D6:A1:B5:E5:62:9D
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9d:a0:d8:77:40:44:49:71:09:7f:7e:95:60:04:66:65:f7:
77:e1:6b:d3:a3:75:e3:b5:ed:f4:d2:22:e5:94:d2:0a:62:e2:
45:c5:e8:43:97:49:d5:ed:e8:b8:f1:bc:bd:2e:ce:41:17:b2:
14:f4:1a:b2:cd:51:8b:c6:24:f2:5d:12:af:58:08:e7:24:1b:
d9:c6:76:b3:bb:ac:d2:22:8b:04:94:a6:a4:63:45:ac:d8:3b:
c6:90:aa:c9:85:54:22:76:f3:a5:e5:31:9c:33:4d:47:93:57:
68:e0:0a:9d:ed:d1:f6:ea:b1:0e:da:e6:c0:96:f2:3a:6f:18:
69:14:d5:5f:19:c7:f3:34:c2:7e:96:6c:50:c8:73:20:6a:4b:
ef:c7:13:02:bd:7b:a1:35:94:4e:ff:dd:18:79:66:93:cb:17:
87:29:ec:1d:e0:20:12:cc:f8:65:74:72:30:e0:06:8d:90:4e:
a7:75:cb:ef:46:d5:c4:30:25:16:53:b4:d3:3c:8b:29:50:82:
a2:64:1a:a3:f3:ac:05:58:57:23:34:7d:d1:78:a5:1b:85:47:
c7:63:6b:a7:05:32:92:07:f6:75:13:a2:04:06:66:ee:fb:a3:
a2:e2:89:eb:06:86:ca:b0:d7:16:50:1b:26:27:a1:e1:92:10:
ed:7e:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:30 2025 by rpki-client