Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: LRfmbCREpOpr9gbUIsSzoSdBZCPHGb16yGykpxsc1xY=
Subject key identifier: B9:8D:DA:C3:F2:19:19:98:A9:F3:28:F6:6A:83:95:B1:89:94:84:58
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0197609482FD4C4921C763226C11927F28AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 158D
Signing time: Wed 11 Jun 2025 20:00:34 +0000
Manifest this update: Wed 11 Jun 2025 20:00:34 +0000
Manifest next update: Thu 12 Jun 2025 20:00:34 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: SZ6Y2cLNR7SlACegD59mBMME4xJXbB9dXzlmI/vloE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:82:fd:4c:49:21:c7:63:22:6c:11:92:7f:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jun 11 20:00:34 2025 GMT
Not After : Jun 12 20:00:34 2025 GMT
Subject: CN=b98ddac3f2191998a9f328f66a8395b189948458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:0a:57:d6:ce:e9:96:87:cc:fa:95:1b:bc:
f7:5d:cc:af:9b:5d:d6:95:2b:05:b4:c2:1d:0a:12:
80:7d:78:58:17:0d:da:67:1c:c8:88:b5:53:d1:bd:
09:f4:6b:af:4b:b3:53:ec:6e:93:d4:14:38:2e:9a:
26:89:44:88:34:a5:fb:87:2f:6d:7d:4a:e9:da:89:
03:29:81:58:93:5d:1c:de:31:84:62:59:bc:8d:73:
ec:1f:34:11:e7:26:e2:99:a5:eb:e3:5b:6a:f4:c0:
d7:0c:fe:fa:ac:df:46:ba:97:fe:0d:9f:80:69:02:
62:8a:97:c8:a8:99:13:7e:b0:70:4e:6a:65:8c:77:
a8:9d:76:ec:73:f3:90:56:d8:fa:70:0e:ff:02:a4:
c1:5a:21:b8:62:a0:81:01:e2:bf:53:b2:19:56:1d:
65:9f:6d:77:3b:44:7b:ed:f6:b9:d6:3c:12:08:10:
34:42:17:8d:97:c9:12:29:87:53:d6:4c:b0:cf:3f:
4a:af:20:d5:2a:20:8b:22:b4:a9:ea:40:cd:14:7a:
32:df:89:5e:a1:a3:f8:ae:7f:b3:21:a6:52:f3:4b:
a6:f5:99:ba:4f:e2:60:8e:ef:48:a1:83:f2:6a:f2:
fd:3b:29:d7:77:1c:4e:0c:94:70:64:16:0d:a8:a6:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8D:DA:C3:F2:19:19:98:A9:F3:28:F6:6A:83:95:B1:89:94:84:58
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d4:89:74:04:d3:c5:a3:d9:ab:bc:5b:dd:ce:0d:42:bc:1b:
75:45:8e:8b:32:f3:35:34:5a:03:97:ec:31:70:72:9c:0f:79:
1f:52:08:10:79:51:d4:e7:34:89:fd:e4:cc:6a:a6:54:75:91:
0b:e4:0e:85:1d:25:25:96:d1:ae:b3:5a:58:5e:cc:8c:6c:08:
f2:a5:c5:ed:12:60:62:96:26:87:b6:e4:e9:b2:cb:8f:2d:a3:
8c:45:fc:69:7e:75:7a:8b:4d:e2:a4:74:5a:19:0f:c6:39:00:
80:b1:93:ad:36:2c:d5:b8:70:c2:ca:d6:2a:d9:90:97:39:ec:
b9:8f:b3:5b:1f:97:0e:aa:24:17:f3:40:46:4c:d2:4d:b6:0f:
22:84:45:d5:71:a1:2a:91:4f:56:8d:ec:a3:ac:52:c8:41:a8:
78:81:ec:ad:ef:3a:8c:88:f4:d0:ae:bf:9e:7e:d7:df:af:03:
5c:69:61:80:8b:ac:e6:96:4f:28:e2:a2:2d:86:c2:2e:36:f3:
f4:11:83:30:a1:9e:e9:a1:0c:40:57:53:b1:2d:3b:af:02:39:
a7:85:b7:be:a0:1c:52:82:07:4b:27:35:12:5c:30:42:92:a4:
e3:14:50:c4:9e:eb:ee:10:eb:4c:04:58:b8:88:20:31:78:2c:
fd:67:20:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglIL9TEkhx2MibBGSfyivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3
YzBjMWIwHhcNMjUwNjExMjAwMDM0WhcNMjUwNjEyMjAwMDM0WjAzMTEwLwYDVQQD
EyhiOThkZGFjM2YyMTkxOTk4YTlmMzI4ZjY2YTgzOTViMTg5OTQ4NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCUKV9bO6ZaHzPqVG7z3Xcyvm13W
lSsFtMIdChKAfXhYFw3aZxzIiLVT0b0J9GuvS7NT7G6T1BQ4LpomiUSINKX7hy9t
fUrp2okDKYFYk10c3jGEYlm8jXPsHzQR5ybimaXr41tq9MDXDP76rN9Gupf+DZ+A
aQJiipfIqJkTfrBwTmpljHeonXbsc/OQVtj6cA7/AqTBWiG4YqCBAeK/U7IZVh1l
n213O0R77fa51jwSCBA0QheNl8kSKYdT1kywzz9KryDVKiCLIrSp6kDNFHoy34le
oaP4rn+zIaZS80um9Zm6T+Jgju9IoYPyavL9OynXdxxODJRwZBYNqKaRxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmN2sPyGRmYqfMo9mqDlbGJlIRYMB8GA1UdIwQY
MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9SJdATT
xaPZq7xb3c4NQrwbdUWOizLzNTRaA5fsMXBynA95H1IIEHlR1Oc0if3kzGqmVHWR
C+QOhR0lJZbRrrNaWF7MjGwI8qXF7RJgYpYmh7bk6bLLjy2jjEX8aX51eotN4qR0
WhkPxjkAgLGTrTYs1bhwwsrWKtmQlznsuY+zWx+XDqokF/NARkzSTbYPIoRF1XGh
KpFPVo3so6xSyEGoeIHsre86jIj00K6/nn7X368DXGlhgIus5pZPKOKiLYbCLjbz
9BGDMKGe6aEMQFdTsS07rwI5p4W3vqAcUoIHSyc1ElwwQpKk4xRQxJ7r7hDrTARY
uIggMXgs/WcgIA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:13 2025 by rpki-client