Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: hwewB+HsQh3BzKccmxIjzgXDj6eSViMr4w6yzxBiNQE=
Subject key identifier: 1E:0E:27:1C:2E:9E:2C:48:04:67:B7:C1:01:A2:B8:AA:3C:8F:BD:DA
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 019613586E5FD8C088F4AA6B229F7766E596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 14DC
Signing time: Tue 08 Apr 2025 03:01:24 +0000
Manifest this update: Tue 08 Apr 2025 03:01:24 +0000
Manifest next update: Wed 09 Apr 2025 03:01:24 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: aZG7Ol5YNuTqJPURc3Wh2tsbSQnDUZspKIBc1ok9b7I=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:6e:5f:d8:c0:88:f4:aa:6b:22:9f:77:66:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Apr 8 03:01:24 2025 GMT
Not After : Apr 9 03:01:24 2025 GMT
Subject: CN=1e0e271c2e9e2c480467b7c101a2b8aa3c8fbdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:35:51:13:d8:1b:14:91:ba:0d:b3:0d:2d:
8c:35:00:58:ec:05:5d:6a:05:71:ad:7d:94:9f:97:
56:cc:dd:85:b0:29:76:72:44:9a:82:f5:eb:3d:09:
fa:29:5b:7d:45:4d:1b:21:18:59:94:c3:ab:17:f3:
5d:d5:7d:10:59:32:47:52:c7:6e:23:39:b6:81:93:
b9:73:fb:15:4a:7f:2e:c5:12:2a:20:7f:53:91:59:
4e:f3:a6:3b:84:9b:c3:19:9c:69:9f:21:de:fd:74:
22:1b:60:df:9a:04:36:1e:15:3d:79:b4:b4:50:04:
f5:13:14:0b:58:51:f9:ae:50:4c:ce:41:5d:66:8d:
71:a9:c4:89:eb:98:dd:3a:61:16:7a:51:33:7e:58:
dc:6b:a5:57:1e:8f:21:79:ca:1c:80:9d:5f:0d:b1:
0d:93:d3:a0:80:a8:c2:d7:52:07:d9:ba:33:d3:2b:
8f:13:62:e1:21:68:3b:14:32:63:64:d7:48:da:5d:
4f:6a:f5:d9:b5:48:93:21:d1:2c:e2:93:d4:77:2c:
10:bd:16:60:ef:3b:ac:34:c4:07:11:3b:97:c5:e9:
c3:5a:80:a0:8d:05:89:86:90:d6:2f:bd:8b:25:cb:
f2:67:bf:ca:ec:c7:9f:c7:70:3e:9b:ad:93:b6:25:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:27:1C:2E:9E:2C:48:04:67:B7:C1:01:A2:B8:AA:3C:8F:BD:DA
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:95:2c:b6:c1:0b:ef:1a:62:5b:7b:24:11:2e:15:4d:52:99:
71:9a:28:c1:6c:28:e9:aa:e7:89:b5:b0:8f:cb:cf:f9:5c:4c:
2d:cb:d6:68:72:8a:01:e0:84:2d:7f:5a:02:8c:5c:c1:94:04:
c4:93:02:dd:3a:ba:6a:c0:4a:46:3a:61:3e:16:a1:0b:7b:b3:
f2:ed:48:69:21:5a:b0:79:17:96:5c:86:b2:ef:d7:a2:3a:da:
27:c9:41:77:34:56:0b:e5:d9:2b:55:9f:83:7c:15:9b:be:50:
54:42:35:a6:76:c1:3f:5a:7e:18:9e:3b:6b:f6:15:5a:a5:41:
20:34:0e:bc:27:4c:a3:a1:a2:74:45:9b:0b:25:a2:2a:0a:3d:
9f:10:f5:22:12:08:a6:e3:6e:92:6e:f8:45:e8:79:49:e8:e9:
c0:54:bc:9f:0d:ba:3d:24:f3:75:d1:83:6a:9e:92:e9:37:27:
d3:fc:f4:b2:c5:4d:e5:99:80:e5:b0:1d:08:96:ca:db:73:6a:
d7:cd:45:bf:96:82:c3:cc:1a:00:5e:b2:7b:3b:85:4a:e9:44:
c2:8d:f4:50:b3:60:b6:8c:32:0e:e0:af:5f:ab:4f:1c:0e:f8:
3f:ae:cf:b9:f3:ba:68:4c:f2:83:ad:11:a1:07:ef:75:fb:3e:
c8:8a:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:43 2025 by rpki-client