Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: 9MX3ZRS7gxM7Y20NLBjVEErgdFhWeyB1/kzOkdQEQxc=
Subject key identifier: B6:6A:2D:88:35:70:CB:70:A9:67:4F:5F:52:ED:3E:85:1B:B9:FF:A1
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019651C8E00B154A25E16351D17E5FEA41C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:00:40 +0000
Manifest this update: Sun 20 Apr 2025 06:00:40 +0000
Manifest next update: Mon 21 Apr 2025 06:00:40 +0000
Files and hashes: 1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: Ta5tsaZjX8C1rwsgpf0ehZp/M/qb5y5PCH/XCkWHJ0E=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:e0:0b:15:4a:25:e1:63:51:d1:7e:5f:ea:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Apr 20 06:00:40 2025 GMT
Not After : Apr 21 06:00:40 2025 GMT
Subject: CN=b66a2d883570cb70a9674f5f52ed3e851bb9ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:8d:b4:31:7e:41:2c:c4:c5:d4:1b:6a:6d:
82:c5:b0:66:08:e0:18:91:a8:7c:1a:c1:68:46:c9:
bc:b2:47:6b:ef:ff:72:06:a0:f1:50:4b:00:bf:3c:
2c:1e:00:14:a3:6a:d6:d7:41:98:8f:ed:62:04:94:
9d:a4:cf:08:6c:8f:33:39:f2:e5:ce:0b:af:b2:7d:
84:48:9d:04:c0:28:9f:ac:ee:a6:13:4e:14:c5:66:
a6:b0:c0:21:64:64:47:be:99:8c:79:56:c5:87:db:
11:36:5a:ae:9d:35:86:67:af:a8:dd:24:5b:c4:7f:
ed:1f:bf:c9:74:70:f7:d6:7c:89:6f:53:a7:00:20:
45:2c:be:9e:89:85:54:e5:62:55:be:3d:84:5f:41:
b4:7f:ee:96:de:59:ba:4e:60:70:6c:7a:1c:34:1b:
f5:b8:64:55:4a:85:31:bf:bd:9e:d9:3d:59:de:ff:
a8:dc:c9:f7:74:95:6e:da:ec:b4:a3:5a:73:8a:0d:
9c:e9:c0:5f:7a:e2:0f:d2:ca:18:ce:5b:ea:c6:a6:
1b:c9:fe:b3:7c:16:d7:c6:98:30:44:ae:e8:4b:a6:
72:35:49:6d:db:6b:02:71:65:46:cf:1b:75:37:e0:
c3:8e:22:47:76:1e:63:af:15:7b:90:9b:c0:a8:79:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:2D:88:35:70:CB:70:A9:67:4F:5F:52:ED:3E:85:1B:B9:FF:A1
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8a:d1:91:ff:f4:2d:6b:37:ff:be:40:63:65:31:de:c1:0d:
fe:95:8d:84:2e:03:4a:f7:2e:d2:8b:75:c3:b6:aa:86:44:c5:
f4:66:c5:20:6d:4f:a1:44:72:e2:0c:d8:f1:05:ec:95:03:18:
4d:8e:5f:ea:a3:f2:b3:96:6b:67:a5:9a:a6:e3:4c:76:94:19:
97:d6:b2:46:8f:86:13:85:03:f2:71:a1:7c:b3:37:a6:0c:8e:
46:b0:b8:9f:53:48:36:8c:1f:d5:44:09:3c:98:7a:8a:9d:37:
84:7d:d2:b4:30:5c:eb:cf:e5:2a:3f:d1:a6:0f:ad:53:01:8e:
04:74:29:18:d0:40:bb:b5:0c:95:5a:3e:6d:51:7d:1f:68:18:
11:6d:10:c7:e5:39:4e:95:61:55:c9:ec:ba:d0:e7:23:8b:4e:
d0:94:26:f6:85:ca:e3:7a:1d:9a:32:b7:c3:00:7e:01:4c:f1:
9b:15:22:1a:af:09:08:83:a4:96:b2:1c:cc:ce:c6:4e:ef:0c:
5e:f0:56:44:1d:35:05:07:1f:d4:fd:4c:62:1a:4d:d1:ba:a7:
a4:fb:96:09:6e:65:ee:43:18:01:12:39:0f:ce:6d:4d:70:95:
dc:02:2b:8a:e1:03:ef:bb:14:ca:a7:79:43:a9:d1:ee:83:84:
40:9c:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:42 2025 by rpki-client