Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: M/fas/sGJRdBiKdqWRRKKAbmwIEJo+uZf928VIiZ49w=
Subject key identifier: 54:7A:B8:FF:14:BC:3F:2F:0C:4B:7F:B6:CF:0B:E8:3D:8E:82:CA:E7
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 01974A43A4B312B63C916C4197F27CD28DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:36 +0000
Manifest this update: Sat 07 Jun 2025 12:00:36 +0000
Manifest next update: Sun 08 Jun 2025 12:00:36 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: Kts1ei1HYrcRbFKkEn/Jy3j1n7uPMJwoJlXM2u6LrPo=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:a4:b3:12:b6:3c:91:6c:41:97:f2:7c:d2:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jun 7 12:00:36 2025 GMT
Not After : Jun 8 12:00:36 2025 GMT
Subject: CN=547ab8ff14bc3f2f0c4b7fb6cf0be83d8e82cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:3b:98:f1:00:82:6f:e3:55:4a:e6:6e:57:
ad:9f:5f:9b:04:05:f6:f8:4a:01:34:79:3e:ec:1e:
fe:bd:29:24:2c:c4:ca:da:ae:fc:f0:84:ec:6a:ea:
d2:d3:d7:c7:39:de:b8:22:5a:41:b6:55:65:6b:a9:
dd:07:d3:10:a3:9a:23:74:eb:13:50:74:8b:65:e9:
83:a8:07:a7:59:30:b6:d8:77:04:f6:12:0e:1b:72:
d7:ca:c9:70:84:99:50:d7:31:29:51:8a:f6:33:f5:
00:eb:0b:81:b7:ce:47:01:a8:dc:48:95:76:78:e1:
a8:2c:32:ff:4d:3b:c2:7e:29:7e:f2:64:f9:22:4c:
9a:ff:35:89:7a:97:d3:ac:cf:84:1b:1e:f2:24:c2:
ac:97:65:f0:9a:9b:a0:ea:33:fd:e9:ea:21:23:9e:
65:e7:f0:3c:25:3f:54:e4:bd:5d:02:d8:df:ff:e0:
a0:13:ef:10:56:90:90:f5:f2:8a:22:ed:64:3d:cd:
a7:d6:43:0c:51:2a:5d:2b:ce:3e:9a:1a:b1:d6:f2:
e0:de:97:ca:07:bc:38:40:5e:c9:af:76:b0:a3:93:
fd:13:71:94:9a:37:45:b7:3a:0e:44:59:40:97:01:
55:95:24:71:8c:c3:b2:0d:53:7b:d8:22:4a:0a:f6:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:B8:FF:14:BC:3F:2F:0C:4B:7F:B6:CF:0B:E8:3D:8E:82:CA:E7
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:5e:05:f6:40:a6:23:86:33:82:66:f9:c0:c8:4e:91:12:
5b:24:b5:46:1b:e7:8c:7a:0d:b7:53:ea:cd:37:82:46:e1:94:
86:9f:b3:d2:61:d2:ad:60:51:01:db:1a:fe:90:65:e6:cd:27:
85:71:52:c8:5d:1c:f5:f6:b6:ee:d1:25:bf:47:e2:30:8b:b5:
32:5f:39:85:8f:b2:c1:fb:8d:c4:a5:8e:3e:f0:6e:82:7d:55:
7e:09:ad:83:c4:33:d2:93:67:dd:e1:6b:b0:92:cc:5a:2f:b4:
98:52:de:46:f9:11:6e:14:bd:3b:17:32:4c:7d:76:a4:ba:e5:
46:65:63:15:25:fa:60:bd:65:ca:da:91:5f:96:f5:dc:11:44:
c2:d4:ab:a7:c8:eb:89:6b:80:ec:0d:6a:c4:50:c8:03:7b:24:
87:45:a1:f2:c1:0e:11:bf:eb:d6:50:02:ff:42:1c:54:02:eb:
5a:b3:cb:8d:2e:b4:df:3b:ef:db:db:7a:69:ee:b0:13:77:1d:
64:9b:02:d4:74:2d:8d:16:56:a5:b8:a3:26:2a:52:fd:09:89:
1c:80:6a:e1:a4:aa:4f:0f:d2:a9:7d:d5:ea:19:8a:9e:65:7d:
b0:f9:24:93:7f:c9:3e:88:5c:89:29:c6:2c:47:97:73:b1:bf:
84:ac:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:43 2025 by rpki-client