Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: dfmImMPsO/wIdNgXR3uY/1+bAa7941w2swSDjR29Va4=
Subject key identifier: D4:AB:30:9F:32:62:B4:54:29:FD:5B:8C:A1:06:B8:BD:D4:A7:8F:C2
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0197665FA8B5D83266F3EC5368F681B14F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1590
Signing time: Thu 12 Jun 2025 23:00:34 +0000
Manifest this update: Thu 12 Jun 2025 23:00:34 +0000
Manifest next update: Fri 13 Jun 2025 23:00:34 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: aJgHTuTuyvpbl9jYpln/Asnzx1UCDzU81hisFs6PAdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:a8:b5:d8:32:66:f3:ec:53:68:f6:81:b1:4f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jun 12 23:00:34 2025 GMT
Not After : Jun 13 23:00:34 2025 GMT
Subject: CN=d4ab309f3262b45429fd5b8ca106b8bdd4a78fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:96:fb:79:88:6f:37:be:91:c1:1f:9c:ec:
71:44:de:da:01:6b:32:85:71:0c:6d:f7:d7:d1:08:
95:b6:72:ee:ab:0b:c5:e9:b1:52:15:5d:65:22:e0:
22:29:32:bd:83:44:8b:3d:a6:68:29:81:e5:0d:32:
91:b9:b6:66:74:df:11:b1:7f:91:55:4e:a2:3b:0c:
66:1b:c1:12:c1:87:d2:2a:32:c0:02:b1:9a:a2:ca:
93:92:ba:2b:18:d8:9a:2e:29:b7:4a:6e:65:d0:17:
97:5f:fd:6d:d2:f7:36:2e:a1:0f:8e:fb:63:42:04:
be:b5:3c:cb:2b:ff:50:e2:98:37:97:6d:7a:15:b1:
0f:3f:fe:50:a1:19:a9:6a:aa:43:cb:72:7a:5b:a8:
6d:d4:de:00:5e:ac:88:dc:bc:16:f8:56:d6:d6:4e:
b9:88:d9:d8:92:6a:33:60:5e:86:b7:bf:76:0a:7e:
95:b2:9d:1d:63:70:51:79:70:93:06:43:aa:52:76:
e8:e9:a5:25:4b:a7:80:db:d4:e1:3d:c2:25:8d:2c:
42:53:f6:01:bd:82:83:0b:b1:78:73:ea:6e:7e:2c:
cc:12:5c:be:48:a7:f7:c3:b4:92:5f:5b:e1:d5:bb:
9d:b9:51:b0:f2:6a:9d:a0:5e:b1:03:76:ed:57:e2:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:30:9F:32:62:B4:54:29:FD:5B:8C:A1:06:B8:BD:D4:A7:8F:C2
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c0:da:f2:8d:f3:6e:ef:89:f9:26:b4:9c:c3:f5:04:93:1d:
ea:77:16:58:5c:61:d0:7d:e6:70:08:1e:1d:07:43:11:c7:5d:
52:c4:33:ba:09:e5:e4:ec:84:b2:01:4c:22:5c:36:0b:4f:d3:
87:64:92:dc:da:82:3b:c3:45:3c:0a:48:31:61:62:3a:7f:7a:
a2:93:4f:11:d8:ff:7c:93:f4:e4:cd:ed:d1:eb:a6:04:b0:c7:
58:da:ff:cd:ec:86:c7:29:d2:64:d1:8f:96:7e:c8:89:51:2d:
c6:00:9b:58:63:a8:c7:46:69:1c:4f:3d:70:18:30:d9:c8:87:
bc:43:04:1f:d8:6d:46:fe:68:56:9a:c4:50:ba:24:40:c0:04:
ed:bf:ee:74:85:c0:a3:29:06:1c:52:ed:70:47:f6:8c:13:dd:
f5:e5:6a:a6:89:d5:53:35:bd:9d:3e:73:7a:34:86:5f:19:61:
c7:ac:95:53:48:0d:39:84:8e:07:47:fe:af:a5:18:f5:73:7c:
d7:eb:c7:a3:d2:fc:f0:b4:c2:9c:f9:fb:d1:06:2d:cc:5b:1c:
98:c7:7e:73:cc:9b:49:33:1c:2a:37:b1:10:a8:5c:76:2c:57:
3a:12:7d:57:00:1a:c9:b7:2c:93:ae:26:6b:45:64:76:91:d6:
64:c4:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:46:58 2025 by rpki-client