Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: rVUp1I4zme6yVPVRMmTM6d8/Olhuq6OrLUS7AfbeOEs=
Subject key identifier: E9:F2:D9:1F:B5:E3:70:34:0F:67:48:35:5F:6B:93:5A:F5:61:8C:7B
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019758DB0E3C3F395FD70770D10FBBBF30D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 08:00:40 +0000
Manifest this update: Tue 10 Jun 2025 08:00:40 +0000
Manifest next update: Wed 11 Jun 2025 08:00:40 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: 77GVURJaXhasaKQTpjbTNRY53E1jZObRO6Jn8TAPxWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:db:0e:3c:3f:39:5f:d7:07:70:d1:0f:bb:bf:30:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jun 10 08:00:40 2025 GMT
Not After : Jun 11 08:00:40 2025 GMT
Subject: CN=e9f2d91fb5e370340f6748355f6b935af5618c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:bc:10:07:c4:50:31:91:e0:43:4a:54:4d:
58:23:33:59:83:33:49:ac:d2:47:66:e9:26:0a:36:
7e:45:80:29:c4:98:8a:a2:3a:2e:b2:21:01:28:c2:
c5:76:e5:1d:5b:d4:c9:af:69:67:fd:a3:f0:92:55:
1c:f6:fc:6d:13:2d:e7:08:95:56:46:dd:28:b7:14:
f5:22:45:f8:ad:55:ed:74:f8:24:40:ae:3a:33:ed:
7d:a5:0d:c6:31:94:5d:d7:23:30:19:f3:50:69:00:
76:c1:2e:dd:e3:61:92:7d:30:04:7d:81:9b:db:0d:
21:c7:3b:b6:01:34:b1:55:63:1d:84:f3:83:63:16:
5c:7b:ad:b7:fd:2d:a0:d4:38:73:e5:89:b8:47:9c:
b3:46:7f:31:eb:cd:a2:fa:37:dd:30:86:9b:b9:3d:
64:10:6f:16:2e:54:52:5a:b9:24:95:56:64:b5:b4:
b1:41:c8:b5:fc:d0:b3:b0:f3:18:cf:c1:b3:38:08:
41:79:ec:d8:be:e2:4a:9c:c6:1e:cf:03:62:c6:0c:
b7:eb:16:2a:57:83:0e:8f:c0:9c:6c:8f:6d:8d:22:
4d:14:d6:a2:19:97:29:67:55:65:4e:86:92:6f:71:
f7:e2:c6:5e:2b:7a:38:07:af:ac:6b:71:c2:22:08:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:D9:1F:B5:E3:70:34:0F:67:48:35:5F:6B:93:5A:F5:61:8C:7B
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:18:e1:91:44:3b:cd:fb:51:4d:69:aa:c7:92:3f:28:45:e2:
3f:da:42:a9:76:2a:85:37:31:b3:e7:9f:9b:3f:68:7d:45:be:
f2:9a:94:94:4d:93:53:13:c1:e8:c4:ba:90:b5:95:fc:a8:1a:
ec:12:c7:67:81:49:38:55:5b:90:46:e9:5e:7f:04:41:37:a3:
75:e4:12:55:63:0e:14:41:11:7d:ef:cc:8d:a2:2d:44:8d:7f:
51:2e:b1:50:ec:bb:40:05:a0:94:75:c3:5f:20:ef:86:b3:d4:
f3:41:8e:53:b5:94:c1:f5:0c:f6:20:7a:9a:29:55:e4:51:67:
1e:82:c9:5a:cd:51:b1:5d:40:06:c5:68:c3:ad:49:7b:f5:ca:
0b:14:56:a9:06:a2:06:c5:6c:23:3c:20:50:1f:8d:0a:48:eb:
3f:c1:9b:84:03:a1:ec:8f:3f:8e:52:eb:dc:81:e2:20:62:89:
91:98:61:e8:f2:5f:cd:51:c5:49:c6:3f:77:20:22:4a:46:a1:
68:2b:87:10:1d:a1:95:c5:12:50:4e:10:77:35:a0:50:ca:f6:
9e:f3:b9:d1:71:91:26:af:bd:f0:b3:db:93:ca:df:16:71:a9:
5f:92:1e:89:8f:e4:48:0d:83:0b:df:20:3b:3b:ad:d3:99:49:
63:b7:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:16:22 2025 by rpki-client