Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: rnpYTn5gH+faoa+4O4vgT6GDqxE0T8eTnaqeZGQXrjE=
Subject key identifier: BE:D4:B1:DC:39:25:E1:32:93:20:4C:FF:66:3A:B7:F6:DB:24:35:50
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 01976D066917C57194E81EC389DA1D432CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 0483
Signing time: Sat 14 Jun 2025 06:00:26 +0000
Manifest this update: Sat 14 Jun 2025 06:00:26 +0000
Manifest next update: Sun 15 Jun 2025 06:00:26 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: 3LxceCeqUP2A696fAH4Jq1K4HDeIIEUPUy/tVcxWkD8=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:69:17:c5:71:94:e8:1e:c3:89:da:1d:43:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Jun 14 06:00:26 2025 GMT
Not After : Jun 15 06:00:26 2025 GMT
Subject: CN=bed4b1dc3925e13293204cff663ab7f6db243550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:61:df:9d:01:01:c0:e3:ca:e3:56:71:e7:
75:48:56:7e:5a:3f:11:42:77:43:a2:76:8f:47:ed:
d4:3d:92:c0:61:bb:6f:da:47:2d:43:57:85:97:9b:
c6:91:9f:40:f5:9d:84:7f:03:4b:83:12:dc:44:6b:
f6:bf:3d:02:69:97:17:bb:fd:a4:ed:e7:06:ee:2a:
3f:b0:81:08:56:ee:db:18:c1:7b:df:b5:4d:c4:0a:
6b:b2:ed:69:ad:c0:27:d9:e4:d8:c2:a2:b8:f3:38:
9d:04:bf:f1:28:aa:58:54:07:d9:ea:4d:ec:cf:ac:
fc:75:c7:c1:a8:b1:67:6b:9a:52:1f:79:b2:83:15:
4d:74:ee:36:a8:e7:6b:dd:4e:97:c4:7f:4d:09:f3:
f5:2d:4a:0e:e0:c8:0a:f7:94:f5:05:2c:77:c1:13:
12:3a:f9:c6:af:f6:4b:bc:a4:f7:da:37:77:16:45:
f0:fa:31:a6:ce:8b:ef:9d:c6:cc:a5:9b:e9:84:16:
ee:6a:c9:15:f6:7a:09:eb:26:fc:81:dc:03:4d:31:
10:f5:64:0b:22:20:44:fc:83:2c:72:94:98:ad:02:
f1:57:78:fe:44:0e:17:5a:56:a2:93:fc:6c:21:dd:
62:d7:be:b1:c1:6f:9c:a6:45:22:93:08:07:20:8b:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:B1:DC:39:25:E1:32:93:20:4C:FF:66:3A:B7:F6:DB:24:35:50
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:80:41:92:68:27:9e:af:ee:35:62:19:74:00:d7:b6:12:7e:
f9:fb:99:32:8e:74:62:57:88:4d:05:69:db:6b:32:50:f2:7c:
55:e5:e2:3c:ce:7a:55:4b:91:1a:3e:0c:f5:4b:00:d4:47:4b:
f2:ee:27:ca:78:e6:de:83:d4:69:bf:80:09:14:60:ca:5b:3b:
a9:46:bc:39:c2:f2:d7:1d:18:fa:b4:05:ab:f1:32:1c:8d:69:
13:16:1b:3c:d8:a2:95:68:b7:1a:1b:70:4a:23:f5:79:50:01:
a5:c4:82:b8:6b:32:f7:41:49:c9:02:f9:60:39:ed:39:46:73:
de:c5:34:7d:8f:9a:f9:50:f7:f8:36:e3:0b:a8:d7:d1:1d:50:
a9:5f:a9:13:4b:11:ca:4b:47:01:f4:6a:ec:67:71:34:55:c6:
96:69:62:47:07:75:0f:b8:6a:1a:46:c5:86:6b:bb:a0:43:f3:
46:9d:b3:35:e1:1a:9c:d4:ba:dd:9d:07:d5:32:75:fd:92:b0:
d7:39:ba:a3:c2:b0:af:88:08:d0:64:56:ac:f3:96:89:b6:08:
3d:1b:5f:b2:fb:69:18:75:69:e7:fd:20:8b:2e:85:b2:4a:5d:
f9:06:a0:aa:7e:c0:77:d2:91:e1:6c:23:85:e8:2f:67:dd:31:
98:a1:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:20:15 2025 by rpki-client