Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File: K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier: wX+wHo9IpCEYxiZpndCUI7uPhQiOW0OZHW9cFGN2SlU=
Subject key identifier: 33:9C:06:BD:1F:28:6C:83:77:CB:61:B6:02:C2:D8:1D:92:E7:B5:18
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 0196816BC73104FBB43B26EAD502CA9798F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 12:00:46 +0000
Manifest this update: Tue 29 Apr 2025 12:00:46 +0000
Manifest next update: Wed 30 Apr 2025 12:00:46 +0000
Files and hashes: 1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: /fcWCfv/FyBw+4GjmnFxnwfwSCvjhY//lMvRuaBk3s4=)
2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:c7:31:04:fb:b4:3b:26:ea:d5:02:ca:97:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Apr 29 12:00:46 2025 GMT
Not After : Apr 30 12:00:46 2025 GMT
Subject: CN=339c06bd1f286c8377cb61b602c2d81d92e7b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:a6:c9:8e:ed:96:4a:c4:98:5d:cf:88:bf:
dd:84:44:85:13:56:c9:ff:b6:8b:f0:d7:64:ac:bb:
35:a9:bd:7b:2e:01:29:af:64:c3:18:a9:60:9f:af:
79:d4:8e:91:7f:14:71:7d:c9:78:f0:2f:c4:f4:3c:
73:87:e3:b7:95:1d:85:10:6b:9c:8a:28:6f:6e:0d:
ed:00:f3:6e:31:db:3d:ae:8a:c1:47:f4:37:64:19:
5a:fc:03:76:c0:bb:78:64:a9:98:17:8e:6f:c5:f5:
b0:09:31:9c:67:f9:db:33:17:30:ac:4a:f9:b3:de:
cc:e0:c2:75:c3:1a:ed:32:ff:c3:70:ea:48:65:7e:
30:6e:30:59:ff:7b:d5:66:01:8e:e6:3e:77:ce:17:
1f:09:81:0e:3e:22:ef:5c:5b:93:98:4f:25:47:60:
e9:b7:8b:8e:d3:3a:99:01:ba:a7:dd:8d:95:9f:13:
91:64:fb:67:25:6f:d1:df:30:ac:81:41:ca:f6:65:
9f:c7:91:21:15:eb:a3:f9:dd:0c:ad:b0:bd:b5:30:
ce:4f:30:01:73:05:8a:22:a4:2d:8f:e1:9b:0d:1c:
54:86:f1:f2:5e:8b:a7:d2:61:31:15:09:c0:c1:58:
1a:4e:53:f1:63:0c:58:c2:66:b6:21:e5:aa:d3:66:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:06:BD:1F:28:6C:83:77:CB:61:B6:02:C2:D8:1D:92:E7:B5:18
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:71:aa:81:31:dd:82:ad:57:70:d3:eb:9e:9e:f9:21:6e:e5:
b8:bb:ea:8d:b1:fc:b8:f6:62:96:06:89:11:af:1b:62:e8:07:
11:a8:9b:1a:ca:a1:ee:d2:97:fe:c7:bf:17:2e:2a:49:6a:00:
52:9d:8e:67:c5:32:82:f2:ef:18:30:69:41:02:bb:73:aa:4d:
cf:19:cc:26:e0:43:ce:4e:96:a7:d0:eb:24:ac:84:90:23:f9:
29:55:32:cf:76:27:3c:0d:1d:14:21:2f:71:5f:84:3c:0e:83:
af:bb:e9:46:f5:8d:af:ab:77:f2:74:b2:cf:0a:7f:af:8a:1c:
8f:60:bc:61:29:37:a3:5d:88:0d:a5:ba:d8:f5:8f:fa:ff:cd:
6b:e6:23:5b:e9:dc:43:b1:9a:41:e7:99:2b:40:58:bd:3d:ed:
52:93:6a:a2:51:f6:64:e1:f9:d8:c4:51:21:db:39:de:a7:de:
06:4f:fd:02:13:fb:ba:0f:92:ca:dd:ce:4e:e8:b2:03:9a:5c:
45:95:aa:82:5c:d1:59:d7:30:ac:82:4f:b3:d0:72:22:91:09:
ee:23:b9:6e:38:2f:7c:cb:0f:3a:60:19:75:e6:13:f7:d4:38:
0f:fb:61:60:68:31:e3:0f:9c:b5:3c:ff:7f:1f:11:be:3f:6e:
d4:96:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:15 2025 by rpki-client