Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: 5rPR6xDQr4uKlms2UcZp9TDseiGnTnjmMwtaQ1HeGFc=
Subject key identifier: 9C:FF:07:21:2F:1D:64:14:7C:38:0E:3A:10:9E:7F:04:BC:3E:08:27
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 01976282F7278350D1231601516664A598CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 158E
Signing time: Thu 12 Jun 2025 05:00:39 +0000
Manifest this update: Thu 12 Jun 2025 05:00:39 +0000
Manifest next update: Fri 13 Jun 2025 05:00:39 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: aDo1/8dkUNxNstYvNebbE76iN0xK27CvxTi+GeHo9Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:82:f7:27:83:50:d1:23:16:01:51:66:64:a5:98:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jun 12 05:00:39 2025 GMT
Not After : Jun 13 05:00:39 2025 GMT
Subject: CN=9cff07212f1d64147c380e3a109e7f04bc3e0827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:aa:b5:7c:12:ac:36:f7:d7:f1:6a:6c:ed:
c6:98:ac:f0:02:5c:df:10:a4:a3:aa:38:57:13:90:
95:d8:8d:46:a7:ac:c2:b1:77:94:79:5d:b7:4f:cf:
26:93:4c:61:5f:00:c3:96:a3:22:2b:42:13:a0:30:
85:a7:c6:ac:2e:f6:60:c3:19:bc:a6:85:62:84:96:
c4:ad:25:28:cb:ac:81:42:cb:e6:0d:eb:53:28:ad:
64:d2:70:fc:25:55:cb:c5:fd:47:cf:8c:94:ae:a8:
5f:3d:88:64:03:68:3e:d3:44:92:31:4b:10:e1:81:
42:ad:67:a1:68:6b:af:91:47:0a:76:72:cd:2a:97:
64:ec:20:06:13:ee:cc:de:1b:37:64:ae:0e:96:de:
09:9c:f2:0c:44:4f:1d:dd:5c:e8:75:a1:74:8d:70:
ee:0e:f3:55:82:bf:4a:83:41:92:00:2f:7a:f4:d4:
4c:0d:5b:a5:05:26:0d:4a:33:90:22:4f:37:64:07:
19:bf:2f:c9:c3:f5:e7:a7:e4:0c:18:88:24:91:ca:
2c:97:e2:6e:f7:c8:1d:47:9a:43:06:1a:9d:0b:75:
bf:44:5f:b6:6c:25:8a:5c:9a:b4:e6:ca:c3:66:da:
a4:5f:f8:a8:56:f7:ad:95:cf:29:c9:64:2f:07:98:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:07:21:2F:1D:64:14:7C:38:0E:3A:10:9E:7F:04:BC:3E:08:27
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:63:20:a8:9b:97:e6:0a:05:fb:10:da:a0:0e:04:d6:f7:8f:
5b:db:37:80:41:ad:34:bc:11:8b:39:79:f0:1d:7a:c7:69:69:
9d:c9:13:fe:fc:67:88:76:6e:dd:4d:e4:15:80:86:55:85:5d:
91:a7:a5:40:6b:17:f1:31:51:d2:ce:a1:c2:0a:b1:56:b9:e0:
38:c0:53:fd:14:4f:78:82:e0:3b:de:12:bd:9d:22:71:75:c0:
c3:1f:8d:49:7b:15:08:fd:2e:f9:6c:28:b9:7e:88:fc:fb:cd:
ba:3a:2e:c4:a4:35:f4:84:8d:db:61:39:ab:0c:09:fd:cf:ae:
7c:13:3d:4f:9c:39:e2:22:6b:56:ca:55:72:76:2e:1b:4c:5c:
5b:31:c2:04:99:58:f6:2f:89:5c:5b:d1:fa:1b:a8:b7:52:aa:
1e:ac:e3:31:26:04:4a:4e:b2:ab:28:da:b0:fd:c5:aa:58:5a:
b7:fe:98:c8:ef:79:cf:74:c6:3e:65:99:de:6a:c6:28:61:f5:
bc:32:4d:8f:bb:b4:29:f8:1c:ad:59:14:de:26:fe:dc:c3:08:
19:d9:2b:f6:78:e6:fa:ff:c3:94:d6:a7:2b:e1:19:24:e1:de:
c2:97:7e:47:30:c4:39:68:78:17:3e:aa:1a:85:23:75:11:08:
2a:9d:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:32:37 2025 by rpki-client