Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: eVwx/K2kBSajyB5MrVFdZAXGaxPdtInk9bjNWmwR5Zc=
Subject key identifier: C2:1C:09:EA:E5:D4:FD:95:7F:80:F7:72:FD:4F:1F:15:69:65:32:59
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 0196BB5B0A7B227E1F00BC2A657078849E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 18:00:27 +0000
Manifest this update: Sat 10 May 2025 18:00:27 +0000
Manifest next update: Sun 11 May 2025 18:00:27 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: c5ehnC+03d6d2W80f38NG9rw2ZO5FajSk3997a0aohw=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:0a:7b:22:7e:1f:00:bc:2a:65:70:78:84:9e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: May 10 18:00:27 2025 GMT
Not After : May 11 18:00:27 2025 GMT
Subject: CN=c21c09eae5d4fd957f80f772fd4f1f1569653259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:69:cb:1a:8b:06:61:07:1b:61:34:55:82:
82:eb:ba:de:65:df:08:1a:8c:6b:d1:5e:d2:60:20:
11:69:97:d8:4b:4f:9e:5a:6d:8e:d5:b6:df:2d:03:
22:1b:99:15:cc:7e:6f:88:a8:f1:b5:79:3c:fe:65:
0a:6a:90:79:5f:7b:ff:fd:09:ff:9b:32:01:e6:ee:
7b:71:1e:5c:92:db:70:63:57:52:e1:0a:9d:46:ff:
4c:59:41:19:61:43:01:66:c4:75:b2:d9:0d:46:63:
36:31:e7:0f:57:2e:7d:2a:3c:81:c2:b1:c6:9e:da:
b9:59:35:fa:a6:3a:05:47:73:ec:de:f8:91:da:cd:
53:39:a9:ca:2d:54:cb:e0:af:40:32:53:69:7d:d8:
6c:d8:bd:2c:36:5f:7f:d3:63:f5:19:ca:fd:59:12:
b2:c2:06:d8:32:53:14:9f:08:87:be:70:62:24:ff:
ae:3c:19:4b:fe:24:3c:73:49:c3:24:d7:9a:38:39:
ed:aa:7c:53:53:b5:a3:a7:05:97:23:97:c4:b7:b7:
fd:dc:a8:cf:2c:8b:71:a7:d4:f4:d3:92:1a:ac:9c:
18:9d:08:89:67:11:18:0e:b5:96:63:54:3c:f0:08:
a0:fb:66:62:8f:7a:ec:6f:f1:09:58:22:5d:6d:0b:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:09:EA:E5:D4:FD:95:7F:80:F7:72:FD:4F:1F:15:69:65:32:59
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:5f:80:40:56:24:d1:6f:82:f8:43:ab:2b:e4:dd:45:ce:
b1:40:8e:74:d8:2f:a8:cb:d6:37:67:21:f4:89:88:f8:e9:bd:
3d:05:fc:35:db:e7:bb:7b:3b:78:23:56:be:f7:2d:2f:fc:ad:
62:31:b7:7a:85:1a:c9:b3:fb:50:1f:68:2e:26:f2:e7:58:48:
f7:f6:9a:f9:97:51:28:7f:bf:23:ec:62:9c:03:1b:52:ba:91:
27:c1:83:d7:20:d1:a4:fb:50:7f:c0:29:a7:7e:b6:fa:14:b7:
24:fa:34:98:06:50:c6:39:03:1a:d4:ef:69:c4:6e:fb:c1:04:
44:74:22:e2:3e:a4:cd:64:64:c4:da:9a:73:e9:60:7c:4d:39:
09:96:80:55:b4:49:9b:80:af:ce:5b:53:01:82:6e:fd:0c:2d:
dd:31:d6:25:27:5e:20:9d:81:5f:ce:e9:ac:0e:94:b4:28:a2:
2b:c1:bc:48:c5:a1:38:a9:b6:2d:7b:51:20:9c:01:64:20:6d:
25:78:a0:96:a8:91:e1:23:85:fc:d8:9d:f2:4b:cd:b8:6b:b8:
4d:2e:8d:88:70:98:17:14:b8:42:7b:c4:02:39:fc:ca:0e:35:
d4:96:c4:ec:86:b9:ed:31:ed:3e:72:39:0c:83:9c:a8:0f:e9:
53:69:45:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Wwp7In4fALwqZXB4hJ6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmJkNjM5ZWZiMTEzZDE5Njg4YTFhY2NlNjk0NWJiNmM2
YTlhYzUwHhcNMjUwNTEwMTgwMDI3WhcNMjUwNTExMTgwMDI3WjAzMTEwLwYDVQQD
EyhjMjFjMDllYWU1ZDRmZDk1N2Y4MGY3NzJmZDRmMWYxNTY5NjUzMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18FpyxqLBmEHG2E0VYKC67reZd8I
Goxr0V7SYCARaZfYS0+eWm2O1bbfLQMiG5kVzH5viKjxtXk8/mUKapB5X3v//Qn/
mzIB5u57cR5ckttwY1dS4QqdRv9MWUEZYUMBZsR1stkNRmM2MecPVy59KjyBwrHG
ntq5WTX6pjoFR3Ps3viR2s1TOanKLVTL4K9AMlNpfdhs2L0sNl9/02P1Gcr9WRKy
wgbYMlMUnwiHvnBiJP+uPBlL/iQ8c0nDJNeaODntqnxTU7WjpwWXI5fEt7f93KjP
LItxp9T005IarJwYnQiJZxEYDrWWY1Q88Aig+2Zij3rsb/EJWCJdbQssUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIcCerl1P2Vf4D3cv1PHxVpZTJZMB8GA1UdIwQY
MBaAFCu71jnvsRPRloihrM5pRbtsaprFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzd2V09lLXhFOUdXaUtHc3ptbEZ1MnhxbXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNTAwOGEtMGY0Mi00NTU3LTlmZWIt
Mzk4NGMyMTNlMjE0LzEvSzd2V09lLXhFOUdXaUtHc3ptbEZ1MnhxbXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kNTAwOGEtMGY0Mi00NTU3LTlmZWItMzk4NGMyMTNlMjE0
LzEvSzd2V09lLXhFOUdXaUtHc3ptbEZ1MnhxbXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1xfgEBW
JNFvgvhDqyvk3UXOsUCOdNgvqMvWN2ch9ImI+Om9PQX8Ndvnu3s7eCNWvvctL/yt
YjG3eoUaybP7UB9oLiby51hI9/aa+ZdRKH+/I+xinAMbUrqRJ8GD1yDRpPtQf8Ap
p362+hS3JPo0mAZQxjkDGtTvacRu+8EERHQi4j6kzWRkxNqac+lgfE05CZaAVbRJ
m4CvzltTAYJu/Qwt3THWJSdeIJ2BX87prA6UtCiiK8G8SMWhOKm2LXtRIJwBZCBt
JXiglqiR4SOF/Nid8kvNuGu4TS6NiHCYFxS4QnvEAjn8yg411JbE7Ia57THtPnI5
DIOcqA/pU2lF6Q==
-----END CERTIFICATE-----
Generated at Sun May 11 03:37:28 2025 by rpki-client