Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: K9iihb2OQQumFtyncLRyj+ZkXw28ttTUG/HXAul3bLg=
Subject key identifier: CF:14:5A:64:E3:E3:2C:5D:C8:3A:62:93:BB:41:C4:85:D4:06:56:36
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 0198D73B6DFCC1D6DE92A2D2C0AF99D5A04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 14:00:52 +0000
Manifest this update: Sat 23 Aug 2025 14:00:52 +0000
Manifest next update: Sun 24 Aug 2025 14:00:52 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: qfRqYidfgwjyYdlzvQ4BdMItpn9dO+QCAumVzBEPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:6d:fc:c1:d6:de:92:a2:d2:c0:af:99:d5:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Aug 23 14:00:52 2025 GMT
Not After : Aug 24 14:00:52 2025 GMT
Subject: CN=cf145a64e3e32c5dc83a6293bb41c485d4065636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:5c:be:96:af:37:42:57:84:a4:78:17:44:
36:55:2f:46:07:cc:64:35:ec:a8:1c:7b:35:95:40:
6b:e8:a8:26:98:cd:ac:a7:53:5e:77:14:9c:a3:ae:
a3:15:db:f1:96:03:65:6a:7f:00:6a:4c:35:bb:aa:
3f:4a:42:58:98:76:20:af:c8:80:58:b3:b0:7c:36:
66:b6:db:ff:ea:ef:ee:ee:21:9b:7e:7b:ed:0c:c1:
48:50:2e:88:93:94:1a:e4:ab:1e:c9:27:42:85:72:
7d:7b:65:84:73:39:2e:ed:63:71:27:71:d1:b7:4e:
db:14:db:6f:31:20:4e:ea:e5:71:33:ae:3d:0c:40:
01:05:62:a6:73:fd:45:ad:d6:d9:e1:3e:d1:33:6a:
fb:e5:0b:f6:ae:6b:cf:2e:f9:82:ca:85:ac:34:40:
7b:e9:a1:04:89:45:c4:97:95:68:72:85:05:6e:75:
ad:d9:a7:f4:1d:53:42:51:0d:86:17:6f:3f:50:fc:
28:9c:07:ce:51:32:b0:71:16:d8:bd:24:03:d3:37:
cb:d1:17:80:b8:61:da:c2:4e:04:61:e4:60:b2:09:
0b:1b:3c:9d:a3:ca:c7:a7:02:dc:ac:b9:4b:24:de:
0f:27:01:43:ab:36:c1:9a:9a:c7:f1:4f:ac:6d:26:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:5A:64:E3:E3:2C:5D:C8:3A:62:93:BB:41:C4:85:D4:06:56:36
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a5:d0:60:af:5f:29:b1:42:3b:ba:f7:da:61:7a:c2:dd:47:
6d:9c:56:9f:9a:16:b8:0c:ff:c3:9c:dc:38:9d:a8:a6:45:99:
a4:7d:6d:14:c2:5c:59:61:c5:1e:f9:81:6f:e4:e1:b5:5c:99:
3b:cc:9b:de:2c:4d:56:ce:1b:c8:ed:aa:4b:da:a5:2b:fe:b2:
07:43:95:c5:62:31:b3:76:26:61:67:7e:df:45:e6:ab:67:a8:
ac:aa:a8:87:fa:7f:24:a9:01:cf:5b:17:12:9b:51:dd:34:00:
f3:89:1e:b9:76:72:be:39:a4:2c:40:c7:33:d2:75:f1:f0:73:
13:cc:b9:e4:d7:26:10:bd:b9:0c:60:65:70:76:8f:55:cb:1e:
1a:9c:e0:71:f3:62:ea:73:6c:88:0b:ed:4f:ec:ec:12:6b:e0:
ca:9e:0d:b2:87:17:37:bf:e8:1a:a7:9b:4f:8f:a6:fe:6f:f6:
6d:7e:97:14:ff:e8:b5:d7:85:d4:8f:c9:f6:c7:a4:f8:83:be:
41:a7:59:6a:1a:3f:0d:ac:b8:fc:f7:14:ac:90:c0:9a:7f:2d:
88:40:4a:dc:96:22:76:e1:c5:9c:06:1b:0f:58:8d:f7:3d:86:
b1:66:34:f8:3e:21:73:67:12:c2:02:9c:3d:d8:32:d0:60:55:
23:d8:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:30 2025 by rpki-client