Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: f9VnN8jxUIP378InH9s3bzzdSbMJi6Mrl6m8kNd8q3o=
Subject key identifier: C4:B5:F9:D7:C5:47:02:17:38:F3:18:A0:0E:C4:FB:B0:1F:A1:B2:34
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019745C2725190625ED898FE8F0630226EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0B1C
Signing time: Fri 06 Jun 2025 15:01:00 +0000
Manifest this update: Fri 06 Jun 2025 15:01:00 +0000
Manifest next update: Sat 07 Jun 2025 15:01:00 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: A7ZNpDG+idqXb7SlAXQckMEsDJ+scKzRWddNeuSUKnI=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:72:51:90:62:5e:d8:98:fe:8f:06:30:22:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jun 6 15:01:00 2025 GMT
Not After : Jun 7 15:01:00 2025 GMT
Subject: CN=c4b5f9d7c547021738f318a00ec4fbb01fa1b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:23:9d:76:f9:10:1d:3f:75:26:d8:2f:c1:
37:38:0e:e8:b9:7b:29:c9:fb:7a:35:70:49:03:c9:
c1:5c:59:75:f3:91:78:d1:f5:67:d5:4c:14:19:10:
e8:68:0c:df:c6:d8:5e:7a:7e:6f:24:b9:d2:ef:28:
47:fa:1a:40:ff:98:8d:57:5e:f4:70:66:b8:8b:f7:
09:27:ba:b7:6d:af:ee:ec:35:b7:0c:22:96:98:c3:
17:ce:bb:59:27:e8:6e:34:8a:97:e7:70:2d:d0:18:
75:3c:7d:d1:54:5e:a4:ce:44:9b:58:26:14:6d:fe:
06:c3:7c:ab:be:07:4e:bb:0d:51:a4:5d:60:62:14:
d4:b1:91:88:bf:df:d4:e4:21:0b:92:3f:2b:a6:d8:
e6:08:19:52:d8:20:52:0a:ab:b3:60:6d:9f:aa:79:
c2:0d:10:ff:e5:74:2e:ed:e1:c6:83:4b:c7:23:26:
da:ab:18:98:f3:3d:d5:3f:33:80:60:5d:61:66:95:
88:16:62:2e:5e:7e:1e:78:1c:22:55:1f:7e:4f:df:
7c:81:b4:ca:96:c1:6d:51:97:e9:fc:ca:9f:cc:e8:
59:89:3d:13:c0:12:e4:e1:2b:b8:22:25:64:a5:ba:
2d:ad:af:f5:3e:3d:84:c2:b8:b3:42:fe:17:b0:70:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:F9:D7:C5:47:02:17:38:F3:18:A0:0E:C4:FB:B0:1F:A1:B2:34
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:52:a6:39:e1:7b:00:dc:d8:23:c3:7a:39:bf:e4:dd:57:
2c:17:33:d2:97:4f:af:e4:b1:a0:22:60:42:bf:32:80:8c:e3:
c4:25:e7:6d:a0:ae:ba:5d:ea:90:23:af:f2:07:14:69:41:70:
d8:89:77:64:5e:b9:64:67:32:74:0c:fd:85:6d:a7:33:90:fd:
62:dd:2a:38:7d:98:f9:20:35:e4:c2:96:c4:45:b7:6c:7f:bc:
ed:26:a0:12:67:49:70:d9:20:c6:a5:af:ab:54:77:5e:04:28:
29:a4:ff:6b:ed:25:33:2f:7d:9a:ab:57:73:4e:3c:47:4e:a4:
8f:30:54:6e:6b:58:a3:e5:f0:eb:34:e0:10:52:85:b2:6e:00:
7d:1a:e9:38:3e:82:0b:95:f8:fa:a0:64:89:9f:30:bd:4c:eb:
40:86:99:69:1a:50:16:dc:83:56:36:29:36:3f:e8:bd:c4:66:
62:41:e0:a6:1b:cb:19:97:3a:fb:95:b5:b7:36:b7:25:1c:f3:
52:65:ab:f6:c5:af:c7:a7:e0:56:f9:94:b5:c8:e6:d8:f6:01:
29:62:37:06:9f:e8:61:a2:7e:47:ac:f4:3f:fe:c3:36:f5:8c:
70:e4:fc:1f:5f:af:25:62:4a:67:c9:14:4b:7f:f3:f1:81:08:
74:ce:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:41:38 2025 by rpki-client