Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: EKzs5JpPRMT7Ais5x2YWD1QSc0Lx+PNWGLD609wZG+k=
Subject key identifier: 89:0C:8A:D5:4F:CA:B1:06:7D:08:9B:D2:55:B9:D1:02:39:DE:81:A4
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 01976D0682F0BE49C1D39EBDA0F52B97AC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:32 +0000
Manifest this update: Sat 14 Jun 2025 06:00:32 +0000
Manifest next update: Sun 15 Jun 2025 06:00:32 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: du5G0NGR8pOCvrHu0r53p1pdgt05Ycfm0PtC7kWFd7k=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:82:f0:be:49:c1:d3:9e:bd:a0:f5:2b:97:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jun 14 06:00:32 2025 GMT
Not After : Jun 15 06:00:32 2025 GMT
Subject: CN=890c8ad54fcab1067d089bd255b9d10239de81a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:50:7c:1b:16:7a:90:93:c0:0e:8b:cb:18:
91:fb:36:fa:ee:ff:05:64:6b:81:00:eb:82:f6:c6:
e4:2e:5d:ad:2b:87:1f:33:64:a9:e8:23:92:3e:2f:
ff:d0:64:5f:94:e3:84:91:ed:18:f9:0f:57:60:2b:
8d:57:b4:ce:2e:b3:40:a3:bf:35:69:13:a0:e2:26:
e8:9a:e5:72:d2:4a:76:9b:1c:87:de:f1:ce:f3:82:
20:e5:c2:ca:c8:40:76:18:41:10:f9:eb:6a:30:c8:
f0:74:11:2d:25:10:9c:7d:0c:b9:71:f0:b8:ae:0e:
68:85:db:77:72:f0:fb:0e:09:e1:8c:6a:62:6d:b6:
2b:42:06:c3:7c:02:65:eb:a8:07:3d:64:1d:3b:da:
85:f7:2e:ea:9a:9f:9c:d0:c9:e5:f4:86:78:34:d8:
56:ea:b1:b5:94:c3:51:7f:d3:fe:98:b6:8a:35:17:
21:30:b7:c7:f2:97:8a:b6:43:70:43:da:2f:ed:4f:
b6:34:58:f8:bd:03:e8:bf:b1:2a:3f:c2:51:17:82:
ec:3f:1c:8f:6c:b5:a9:43:91:eb:ce:33:17:d0:81:
57:7f:e1:c3:06:0c:87:c3:0b:b6:c2:bb:7c:c2:1c:
80:b2:bf:e7:43:3d:1c:04:07:e6:67:b9:e6:64:1c:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:8A:D5:4F:CA:B1:06:7D:08:9B:D2:55:B9:D1:02:39:DE:81:A4
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:44:59:a2:60:cb:66:bd:17:55:c6:a4:41:9a:89:dd:24:
25:32:99:32:21:16:d6:30:62:2b:2e:88:01:dd:0f:99:a2:29:
d8:4c:58:c5:54:2c:01:bb:a7:e3:78:73:4c:20:c8:c0:11:52:
9f:5a:e6:95:9d:83:bc:e5:ec:c2:53:46:b7:96:ca:bd:84:9d:
3a:40:cf:91:75:d4:5e:33:73:36:46:ae:38:f1:e9:6f:8d:ba:
b0:46:4d:04:28:46:6a:c5:fb:96:66:a5:58:4e:8c:35:4e:de:
29:e0:65:92:2c:3f:7c:e0:06:e9:fd:21:91:d8:85:ab:d9:8f:
1b:ad:3a:90:0d:37:cb:3d:f1:69:b2:75:60:bb:4f:16:c3:87:
e0:6e:5c:b4:fd:eb:e4:40:a4:8a:40:24:40:f9:35:03:68:67:
01:a2:b7:ee:b3:4e:e6:3f:19:3a:26:25:73:9b:8d:2f:ca:4c:
8a:dc:76:dd:1f:74:81:91:4f:9f:94:33:a0:19:c9:3e:60:92:
bb:80:84:02:3e:28:fc:d8:82:12:da:f2:51:cb:45:fb:b5:23:
33:f0:b1:81:51:1a:f5:e6:db:43:77:ce:2b:82:be:4b:5a:57:
5b:2c:fd:e3:45:38:69:e2:f5:2e:1b:e1:c8:ca:bc:72:ee:43:
15:dd:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:27 2025 by rpki-client