Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: 2Bnw6c7k8HTCcHLMYhWM4nwFGxIPS7bb3zt9nNwsu8o=
Subject key identifier: EF:C3:7E:7B:BF:98:96:D5:92:A4:A3:DA:62:14:F6:04:17:2D:4A:A9
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 01976A3CDFB061B4E6A35EA4CC122ACC83C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 17:01:03 +0000
Manifest this update: Fri 13 Jun 2025 17:01:03 +0000
Manifest next update: Sat 14 Jun 2025 17:01:03 +0000
Files and hashes: 1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: u4WpmFmHHWrr4xVJf1j64mMQVaOSIh91+BPFHmsf+DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:df:b0:61:b4:e6:a3:5e:a4:cc:12:2a:cc:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jun 13 17:01:03 2025 GMT
Not After : Jun 14 17:01:03 2025 GMT
Subject: CN=efc37e7bbf9896d592a4a3da6214f604172d4aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:2e:93:dc:62:4e:d6:99:5e:1d:9a:a1:3c:
57:cf:db:b3:95:77:fc:64:9e:99:6e:da:a2:2d:e0:
69:41:a3:f8:d7:a7:7d:ee:ea:20:c0:10:00:d2:10:
08:80:51:8f:e9:e9:10:b1:d9:d5:6a:fe:4f:06:61:
9e:42:3e:38:2e:81:23:82:93:60:3e:cd:22:6d:65:
ce:db:0d:57:b6:93:cb:32:bf:94:99:d7:5e:7d:17:
8d:5e:ea:03:93:a6:57:be:d4:6f:6f:2e:5c:c4:02:
d9:4c:e4:e9:17:07:02:aa:b4:04:02:96:15:75:c8:
24:af:f7:42:6f:bf:57:0e:1f:1e:1f:f7:3c:a8:36:
02:b7:44:10:98:e5:78:b5:cc:74:3f:b4:c5:17:e9:
1e:b4:b6:68:b8:52:6f:a1:f9:90:cb:37:94:54:79:
1a:d7:f8:c6:14:16:23:c6:5f:25:e9:63:63:b0:0f:
54:f3:fa:2d:ee:0b:14:b4:1a:ca:e5:cd:d3:13:cf:
a5:19:87:81:fc:fe:ec:90:d9:15:63:1d:61:e5:ce:
1a:0d:9a:5e:3f:55:dd:b3:c8:52:5e:6c:c3:fe:e9:
11:62:b8:47:fe:70:9a:ca:49:4d:59:66:3f:6d:f8:
23:4b:46:56:94:c1:30:83:9c:d6:e7:57:96:95:e9:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:7E:7B:BF:98:96:D5:92:A4:A3:DA:62:14:F6:04:17:2D:4A:A9
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:56:e6:47:98:86:b3:36:2d:e8:c3:54:62:8b:4f:a1:c3:93:
a1:51:07:8b:a3:73:4e:21:bc:ad:63:64:c5:e2:64:90:f1:a5:
bb:a3:6d:75:41:a2:7f:32:6e:43:a7:73:0c:ed:a2:4e:80:4f:
07:ba:02:ce:0e:cd:a9:0a:d8:17:f3:18:ea:35:0e:3e:af:93:
b6:19:72:e4:54:aa:19:b9:72:e3:09:73:a3:a0:20:9e:76:1b:
5d:dd:c8:76:e9:e9:77:50:a0:28:21:e1:b5:f7:fa:48:46:e6:
62:6c:84:89:14:19:a7:46:9e:4e:40:8b:5d:29:54:c5:97:d9:
e8:89:c5:3d:74:8f:0c:46:bf:e3:7b:7f:9b:ed:c4:76:bd:a5:
a7:b2:6f:1f:86:a4:bc:72:84:38:b2:dd:49:a8:21:df:42:64:
ae:33:0a:43:7c:66:09:b8:ba:78:70:44:a7:36:17:65:ca:24:
f4:f2:06:48:0e:0c:64:58:e0:d1:e2:62:43:87:1e:ec:0b:85:
e9:b6:81:bc:cf:cc:1f:8a:af:72:ac:df:08:c2:4f:19:6c:5a:
f4:d0:21:16:af:40:29:c4:93:ae:7e:ec:56:5b:8d:4d:06:32:
ed:9b:2d:4e:9a:51:84:5e:c0:b1:07:b8:00:44:4a:7b:2b:bb:
61:51:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:26 2025 by rpki-client