Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: 5cz5ekbwi/UfF60l+w8eUapQ23uadjHuuudMSRjBUE4=
Subject key identifier: 49:A0:55:23:29:4C:D8:9F:87:A4:08:CE:6E:C0:1B:0A:5C:05:71:2A
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 0197CCBA73502C763DBFE1829CBA7A931209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 20:01:00 +0000
Manifest this update: Wed 02 Jul 2025 20:01:00 +0000
Manifest next update: Thu 03 Jul 2025 20:01:00 +0000
Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: cTpa1ApYEuByUTT1syLxC1StGtOQ/xkp3bxwBLvvO1E=)
4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:73:50:2c:76:3d:bf:e1:82:9c:ba:7a:93:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Jul 2 20:01:00 2025 GMT
Not After : Jul 3 20:01:00 2025 GMT
Subject: CN=49a05523294cd89f87a408ce6ec01b0a5c05712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:5e:29:b4:cd:88:2c:75:d3:66:a3:93:de:
72:66:7c:0f:74:a4:c6:8b:e6:da:2b:59:9b:40:96:
f2:c9:96:7e:d3:58:c2:0b:8e:15:7d:d2:94:21:bf:
9f:af:c2:53:bc:55:3e:ec:12:15:7c:13:d5:e7:e5:
5a:f3:91:9a:f2:7c:88:20:ee:c2:09:62:53:c6:26:
77:50:98:56:db:3f:72:3e:1f:e7:e3:4d:ec:aa:22:
20:1b:bf:0d:17:76:f3:db:87:c2:f7:6c:e6:d5:dc:
41:66:39:bb:45:33:d0:96:9f:15:8f:55:ae:b2:09:
df:6b:ef:04:65:31:5f:5b:00:7d:2e:81:f7:c6:3b:
3c:2e:5d:79:4f:45:42:f3:a3:db:61:05:d9:2c:ea:
09:86:c0:e4:c0:6b:29:b0:3d:ae:40:5d:e6:a1:06:
ab:cc:1d:5a:1e:22:36:3c:13:4f:4c:f7:8a:8e:eb:
eb:8d:49:c6:df:b7:f6:97:90:ff:25:a2:6f:82:48:
53:e1:aa:28:a7:a2:5b:c2:33:ea:3c:5a:35:90:9c:
ab:ed:91:53:fc:47:85:8b:d2:75:b1:22:c7:74:3d:
1e:86:0f:6a:73:ed:4f:7a:e5:76:e2:c4:91:0c:7e:
09:49:26:c3:79:4b:90:81:58:5c:09:52:77:65:46:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:55:23:29:4C:D8:9F:87:A4:08:CE:6E:C0:1B:0A:5C:05:71:2A
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:9f:66:4b:e8:25:37:8c:50:8b:36:8d:41:98:b6:99:52:
ec:0e:af:dd:61:01:4b:58:55:22:6f:94:35:96:de:f6:83:b0:
f6:13:66:f6:f4:59:5c:99:c1:06:09:65:a5:58:fe:97:cf:d0:
d2:80:62:7b:10:65:d2:f9:8b:93:e3:aa:af:2d:e0:27:0f:b4:
a4:a8:f0:83:47:e5:d2:9b:24:f2:0f:d0:44:c5:45:7a:d0:c1:
a9:37:86:c0:da:44:4c:9a:36:89:16:50:1f:d7:79:bd:97:ef:
da:23:be:ae:f8:90:7d:5d:03:61:77:c2:0f:33:9f:06:03:12:
1d:fc:d8:d1:19:c2:88:d3:3a:28:27:33:d2:38:8c:1f:ac:2d:
d8:b0:ee:50:2a:7b:b9:1a:0e:fd:84:48:87:fe:90:82:08:5f:
b4:ac:13:a6:c0:95:a3:68:af:32:8f:79:d1:c9:c5:b2:d4:42:
45:2e:0b:97:21:91:8a:46:5a:4f:1d:e7:51:44:4e:b0:ef:09:
a5:e9:e3:e3:0e:c2:0c:55:13:95:3a:03:99:f2:ad:4b:9f:14:
b8:a8:53:27:7d:23:e5:60:59:9b:10:94:78:ce:4a:4d:77:b2:
31:fa:ad:53:12:e3:ac:89:e0:89:3c:44:82:ef:d2:01:07:34:
f3:48:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:02:18 2025 by rpki-client