Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: zC2hfUXF67pR606OYhTuMEXn3RQLN9dh4gBy3dlHZak=
Subject key identifier: 2F:92:28:1C:60:D4:85:FD:88:49:11:B2:7D:F6:D8:AD:E3:18:FB:32
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 0196391C14F10DBD85231466D7B7CBB5D22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 14F0
Signing time: Tue 15 Apr 2025 11:01:03 +0000
Manifest this update: Tue 15 Apr 2025 11:01:03 +0000
Manifest next update: Wed 16 Apr 2025 11:01:03 +0000
Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: WHKxCTA8R7qh3koF40zIJxqmDgVMNtSM4FyXZk3b6qE=)
4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1c:14:f1:0d:bd:85:23:14:66:d7:b7:cb:b5:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Apr 15 11:01:03 2025 GMT
Not After : Apr 16 11:01:03 2025 GMT
Subject: CN=2f92281c60d485fd884911b27df6d8ade318fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:8b:f6:25:60:1c:d6:80:ad:89:0f:ee:cb:
76:ba:89:34:34:c1:72:53:75:e2:ef:39:72:8c:2b:
b4:ea:9a:05:1c:7a:6d:63:3b:39:c6:a4:08:a4:3f:
28:ef:0c:9c:3d:3a:61:8f:91:0d:7e:5c:dc:46:f8:
9e:15:cf:d3:86:a0:db:96:c1:88:cf:bc:b4:79:0b:
d2:76:44:0c:2f:df:1d:ad:2d:94:22:00:e7:70:e4:
dd:15:c9:ba:44:da:1c:b2:dd:bf:97:74:8c:53:95:
15:51:6e:54:a7:5f:e1:4a:15:03:52:20:02:13:56:
8f:16:ad:e6:40:50:d7:63:10:9f:37:54:ca:13:fa:
16:31:4d:8a:50:f6:a7:6a:21:9e:44:2e:cc:22:ad:
52:24:e3:e2:b5:44:e6:93:cd:fc:ca:42:d7:54:38:
9d:44:37:80:86:08:5d:20:b9:ae:76:89:dd:da:02:
3b:98:4c:64:98:9b:16:c6:4f:ef:fb:85:d0:f6:6f:
9e:d0:f0:39:2d:f8:ea:a1:d9:01:02:32:0b:ac:70:
76:6d:3f:71:d7:48:84:e2:e8:87:d5:36:30:08:ba:
01:4d:0a:5e:fb:a4:24:e5:eb:46:5a:00:b8:a6:e8:
1e:9b:e8:c8:b8:92:f8:48:bd:90:b7:04:9e:6d:03:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:28:1C:60:D4:85:FD:88:49:11:B2:7D:F6:D8:AD:E3:18:FB:32
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:42:ca:89:ef:2a:93:74:8f:3a:4a:f7:f4:27:ed:2d:c2:3b:
92:86:f7:ca:e3:c8:4e:28:94:d0:1f:ff:79:a6:59:97:3f:16:
a2:8c:96:84:0a:f2:15:48:86:59:f3:dd:f7:3e:a6:c5:90:55:
a6:7a:7f:3d:a0:4b:ae:bc:fd:84:95:42:ac:22:bf:64:f9:6a:
d9:f7:e6:cb:ba:f0:65:a4:6b:11:7a:10:25:85:a2:b5:c8:04:
52:1f:86:f2:2f:6e:65:4a:4f:c3:6a:94:5f:39:0e:ef:56:13:
43:3b:ee:ae:ec:fb:a0:b2:ba:a8:67:ed:7b:d2:59:78:15:93:
d0:8c:e7:0b:01:1a:a5:8f:f3:ef:b3:12:41:24:c9:1a:ec:0f:
b3:3d:54:f3:73:f6:55:f4:bc:2d:ea:74:6a:df:48:5e:3e:dd:
23:6f:ed:c1:38:fc:0b:e6:8d:49:08:20:2a:b0:48:20:4e:4d:
26:ea:a1:30:44:e1:6b:07:fc:c8:68:0c:26:7c:d4:5c:87:d9:
13:7d:71:29:aa:4c:f8:b0:9e:18:ff:09:3b:2d:04:3d:b7:a1:
0f:02:4f:ca:18:8a:75:5e:7c:34:46:6f:fb:06:0a:ab:c4:ab:
55:25:a1:0f:4d:2c:af:de:df:3b:bb:57:6b:17:0f:6d:ac:33:
35:19:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:03:11 2025 by rpki-client