Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: yTRJvWs5/TeBLrtbR6Gbbm4E5M6TsueH5gHsssY4iQ4=
Subject key identifier: 21:9E:9E:51:A7:B3:0C:C3:F3:C4:65:2C:83:3D:63:CE:51:26:78:E5
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0196C9F2B4D231A71D49B14A4589AAC884E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 14:00:48 +0000
Manifest this update: Tue 13 May 2025 14:00:48 +0000
Manifest next update: Wed 14 May 2025 14:00:48 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: RuibqrII8diDvJ0XIrAXgb45ntO4uunGzxKquyVg20o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:b4:d2:31:a7:1d:49:b1:4a:45:89:aa:c8:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: May 13 14:00:48 2025 GMT
Not After : May 14 14:00:48 2025 GMT
Subject: CN=219e9e51a7b30cc3f3c4652c833d63ce512678e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:4c:b0:9e:57:97:3c:d9:5c:dd:f3:0d:24:
44:24:d2:27:f1:9d:91:c7:30:18:5e:45:ef:59:0b:
86:f7:07:3e:84:18:59:8c:00:98:c4:9d:fc:d3:77:
2f:49:d9:45:0c:bd:a0:d3:0d:09:e9:6e:67:ff:7f:
09:5b:11:9f:db:04:a3:b7:90:00:34:ff:d6:24:6a:
88:6c:0b:4d:9d:24:77:62:58:f0:c1:96:33:10:df:
44:f1:e7:7a:f6:64:e5:c0:d3:ed:ba:3c:67:b4:3e:
47:b5:f1:4e:4b:9c:a5:e6:54:ab:94:f4:51:81:56:
3e:dc:29:14:4e:01:26:b5:c4:d1:8e:8f:2c:59:9e:
63:11:65:4e:b3:32:1d:c2:9e:f3:99:da:3f:99:b3:
ef:f1:8f:c0:63:68:df:7e:a4:44:ba:ac:81:ac:8c:
31:72:80:c3:77:1c:37:f0:d5:69:eb:f2:c4:eb:a7:
20:89:19:db:f3:be:95:41:10:12:e0:64:05:4f:9b:
89:39:23:fa:a7:c8:7e:f0:62:02:1b:72:cc:dd:29:
81:19:2a:70:0a:93:7c:bb:da:d5:19:38:97:e2:d3:
3a:ab:ec:2e:52:80:9b:9f:1c:d2:57:96:e2:16:fd:
08:fd:43:ca:33:52:01:ae:58:b8:c0:90:88:73:4e:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:9E:51:A7:B3:0C:C3:F3:C4:65:2C:83:3D:63:CE:51:26:78:E5
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ed:88:ea:b9:c5:9a:c4:ce:9e:98:01:66:f2:ac:5c:d0:ff:
de:61:91:8e:fc:d8:81:44:57:51:d5:39:fe:24:d1:10:e7:4d:
d8:35:d6:16:21:7a:8e:0c:93:e6:ba:9b:23:7f:6d:3a:a9:78:
43:c6:4f:22:0e:87:3b:26:2b:5e:c5:03:b5:f4:d3:47:6c:6b:
db:b3:33:d0:0b:90:d0:41:65:a0:cd:26:8c:6b:ea:8b:fa:14:
cc:33:56:3b:a6:62:0a:f0:d1:4c:15:1c:97:d4:20:33:81:24:
b6:4d:99:ac:e3:37:53:18:de:3a:2a:5c:d8:f3:cd:06:7b:f6:
e2:f3:c3:97:06:3d:24:09:90:56:40:9e:b6:a3:e3:ee:d4:3b:
b2:d7:bd:c8:d1:da:d5:76:5c:bd:66:bc:89:a1:db:e0:3c:68:
15:f4:7a:1c:11:86:f5:a6:a7:f3:60:0b:5f:fe:06:2b:67:3f:
34:a9:a3:2e:69:31:c3:01:56:33:04:cd:64:5e:fb:20:d8:98:
f4:1a:3d:a2:09:f4:41:5d:32:1c:80:62:29:ca:4f:20:ee:d7:
4f:ed:bb:75:e5:3d:16:56:6f:72:0b:cf:81:ff:99:cf:e4:7f:
04:81:f2:0f:16:b2:46:0a:2b:96:b1:2a:24:48:db:49:6e:49:
2c:d7:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:50:13 2025 by rpki-client