Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: DkzYaOUaysPz7LISJh3ssNTfPYzdq9jUNJW+7am4psU=
Subject key identifier: 70:B3:6B:49:89:C8:18:82:67:08:82:CD:9B:00:3D:67:BB:9E:6E:99
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0197CEA9605C6C0347A7AF7C8B619732B547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 15C6
Signing time: Thu 03 Jul 2025 05:01:36 +0000
Manifest this update: Thu 03 Jul 2025 05:01:36 +0000
Manifest next update: Fri 04 Jul 2025 05:01:36 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: L74SVbzkeM2/cBYwRr1BjguKDZYqBr4iImE3D/2Y4NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:60:5c:6c:03:47:a7:af:7c:8b:61:97:32:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jul 3 05:01:36 2025 GMT
Not After : Jul 4 05:01:36 2025 GMT
Subject: CN=70b36b4989c81882670882cd9b003d67bb9e6e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:71:88:5b:9a:7e:70:65:de:fd:33:59:e4:
03:3f:f0:d2:83:d0:6c:35:57:4a:e3:e7:d6:ed:b4:
c3:d4:3a:da:83:7c:f2:89:8b:a5:9a:50:e4:5c:4c:
10:4a:ee:9e:06:af:80:3e:90:5a:7e:fa:5c:2b:18:
8d:fc:16:ba:f5:db:6d:29:6c:3d:90:64:26:46:18:
eb:f2:fd:89:d3:49:f5:de:1b:c2:f5:24:01:74:3a:
28:6d:47:28:d5:6f:61:94:2a:cb:57:2d:63:89:63:
2a:0e:0a:dc:28:cd:82:82:9f:21:5d:78:6f:c0:83:
78:2b:82:c3:25:39:76:1b:1f:d2:85:5c:42:ac:54:
49:07:b2:91:1f:c7:b9:96:c6:fc:ba:81:98:5c:88:
f6:f0:29:eb:e5:4e:60:f5:98:1d:a6:18:27:01:6e:
95:57:de:2c:7f:72:a7:ee:c3:49:ec:bd:50:26:99:
46:b6:42:0a:4a:3f:b8:fa:da:f9:6a:97:cf:7a:33:
4e:95:c8:5a:78:bc:46:3c:75:fc:10:8e:56:a5:57:
95:63:7c:c0:db:65:86:c8:fd:72:0b:3b:fb:f3:cc:
c9:fe:b5:00:a5:28:cb:2a:1a:a7:d2:0c:f2:5a:06:
f2:10:42:eb:c3:e3:84:0e:35:f4:d6:9d:2f:73:97:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:6B:49:89:C8:18:82:67:08:82:CD:9B:00:3D:67:BB:9E:6E:99
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:10:91:b2:fa:9e:02:be:95:08:3d:f2:c7:cf:1c:77:db:
e9:46:1c:9c:0f:8a:e7:60:4c:5c:06:6a:5e:f9:07:a4:08:2f:
e5:e4:6d:49:76:97:25:ca:57:2e:0d:c4:a2:a0:92:d1:ae:14:
3a:16:3a:ef:7c:22:60:b6:3f:03:64:44:2d:06:5f:7a:3a:fe:
12:3e:7e:88:e0:02:15:68:49:76:63:ba:74:07:46:38:56:aa:
04:e8:b2:e2:d2:6f:2e:32:72:6b:6d:e8:83:00:ce:a4:19:d6:
b8:68:a1:49:ff:0a:56:aa:2b:62:c5:41:e3:dd:76:72:e7:60:
c3:27:c6:f7:35:ac:fc:52:3d:63:ae:46:d5:8d:c3:db:5d:d0:
4c:83:4a:76:1b:9e:fd:1e:3c:56:e3:17:d8:1e:38:77:e0:9e:
04:f0:ab:47:80:e1:d6:79:26:ce:76:99:90:f0:59:d2:52:1a:
49:64:53:1f:3e:9b:37:b4:f4:94:5a:33:3d:3d:e7:93:56:c9:
c1:a4:f7:4e:72:ac:60:cd:2a:01:b9:9b:19:88:13:47:cc:29:
34:ec:5f:d7:fd:e6:4d:d1:6b:68:3b:1b:1a:f1:de:7e:b9:68:
8a:93:10:1e:b0:86:f0:af:9a:a1:d0:28:22:a1:b1:75:9e:a5:
26:d5:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:55:03 2025 by rpki-client