Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: GZHIUWvzWlZDLlo2F3d+pF5QHTY4sS5TeH+SetR1cu4=
Subject key identifier: B3:2D:45:1E:5E:06:D1:B0:B0:8F:FB:63:AE:E1:13:A1:2D:C8:41:91
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019748551D4F37142CDF6A86B4B1ACD4D665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0470
Signing time: Sat 07 Jun 2025 03:00:26 +0000
Manifest this update: Sat 07 Jun 2025 03:00:26 +0000
Manifest next update: Sun 08 Jun 2025 03:00:26 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: eOztl+0juKuFWHfjEAnLkNACIx/S6ws21L0dOlZ27Ks=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1d:4f:37:14:2c:df:6a:86:b4:b1:ac:d4:d6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Jun 7 03:00:26 2025 GMT
Not After : Jun 8 03:00:26 2025 GMT
Subject: CN=b32d451e5e06d1b0b08ffb63aee113a12dc84191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:af:d3:b0:37:51:35:aa:c2:f0:37:3e:59:
93:29:af:a3:23:65:d7:2e:3b:e9:18:1b:9c:81:1e:
35:53:2c:b0:64:3c:9e:77:3e:70:ed:b1:92:d8:c7:
e3:38:26:ea:4a:ae:0a:75:39:c9:5b:75:e4:e9:4f:
33:41:36:f0:95:29:3c:a3:3e:1a:4b:22:32:84:86:
01:51:57:45:5b:f6:07:85:98:f1:f2:90:ad:94:b6:
86:14:e4:fa:fa:0d:0e:73:c8:0d:01:de:ab:cb:92:
e1:6c:7a:70:28:8b:54:e7:52:81:75:f3:b4:e1:19:
06:f5:f7:47:45:d1:37:07:67:b6:d2:9b:fd:90:8d:
bb:b2:29:1f:8b:75:45:43:a4:f4:ce:bc:d4:5f:35:
4a:0e:0a:98:36:b8:68:b4:41:66:3b:e0:05:d3:b5:
ce:05:af:e2:82:36:53:7a:e1:99:3f:e4:bd:e2:e4:
b7:12:06:5f:c2:c0:01:db:2c:01:ea:c5:94:37:1a:
ce:09:87:ad:84:45:26:a3:63:46:b5:ea:e5:13:8b:
e0:3b:b0:69:f1:65:f0:cd:78:89:41:07:cd:00:0d:
e0:a0:f5:26:da:2e:cf:d0:b9:02:70:bd:65:d0:a0:
4e:57:51:cc:00:a8:10:d7:75:ee:ff:c9:28:a0:f8:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:45:1E:5E:06:D1:B0:B0:8F:FB:63:AE:E1:13:A1:2D:C8:41:91
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:d3:cf:46:e2:bf:2c:44:31:dd:0f:0a:82:a3:b1:d0:90:
f3:16:49:bc:7a:5a:bc:33:cf:4f:e6:43:83:3d:a5:78:c8:f2:
f6:34:21:a5:18:78:a3:a3:24:66:6b:20:8b:db:aa:63:d9:5e:
12:19:db:44:47:db:91:e9:d7:ee:21:f6:13:53:c7:fe:28:c4:
99:14:fd:5d:36:68:ea:89:d6:a4:ce:8d:c9:26:ba:32:01:43:
ac:0b:88:4b:6d:e5:1d:24:35:3c:24:de:77:16:94:fd:79:52:
2d:d8:2f:0f:3a:4d:99:3b:90:71:40:2c:e5:23:39:0a:14:ef:
11:84:ad:6e:4d:8a:00:75:9e:be:82:b5:b2:55:b6:ed:0c:61:
99:77:67:cb:5b:8d:8f:37:83:72:58:dc:aa:5f:23:42:28:c7:
a3:52:ae:3f:bb:e3:e3:b4:ce:05:6a:86:be:ee:54:5a:7f:09:
42:63:86:f7:d5:16:56:6e:88:86:cd:25:43:61:f2:75:ed:63:
87:63:ea:1e:de:f8:1f:11:ee:56:4c:89:df:10:01:ba:a3:d1:
12:52:60:1e:15:34:11:4b:46:66:02:e4:dd:b0:c7:f2:94:62:
26:d6:6b:19:f5:1b:d5:33:2e:0a:db:97:df:4d:91:fe:ea:49:
76:9b:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:21 2025 by rpki-client