Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: EikAq13kvxYGScgNl2Z4196jLo9yu+V/nfV4g5kwBq4=
Subject key identifier: DB:DF:3D:BF:63:85:2F:C2:B9:F5:BB:6A:22:F9:28:40:B5:F0:22:A3
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 0197B6A07AA38F0574EA0133D3B565054473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 146B
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 2WedWU+8c96VtE1O/Mlwdp2+YdB7y4MfgVKM3XFZPJ0=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7a:a3:8f:05:74:ea:01:33:d3:b5:65:05:44:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=dbdf3dbf63852fc2b9f5bb6a22f92840b5f022a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:10:7b:35:b4:7d:84:7e:97:68:93:8a:be:
9f:78:dd:23:66:60:fd:de:5b:1b:38:da:d7:0b:61:
84:6c:c2:dc:79:24:1f:3d:f0:5a:fe:fd:bb:9f:90:
07:7e:0e:06:e8:64:a6:89:0e:53:9b:ef:41:8a:3f:
35:e2:8d:b7:71:d2:c4:c4:dc:c6:88:0e:6d:49:f8:
41:de:b9:88:1b:fa:ec:f7:cd:6d:87:47:96:83:6d:
1d:90:fd:68:c0:cd:c2:58:db:01:d8:6f:71:30:7d:
ad:a3:b1:b7:ef:56:e1:0d:75:8c:53:98:4c:c7:1c:
9e:2c:06:39:c3:57:7f:d6:d0:56:0f:b5:0f:de:5f:
01:9c:fe:28:f6:89:63:5b:e0:37:fd:00:a1:88:f5:
6e:f4:99:de:2f:f8:17:fa:1e:a2:24:07:d4:37:43:
96:0d:d3:94:a7:aa:61:4d:8c:a1:f7:76:35:9f:0c:
90:98:00:bc:61:a8:a7:fe:cc:a0:64:3e:08:ab:7d:
0f:f5:28:64:1c:77:b5:b4:95:b8:dd:97:07:30:a7:
b5:f3:02:33:38:6f:98:41:98:2d:bc:33:d5:aa:59:
f5:fc:14:b0:88:8d:80:56:87:52:c4:dd:83:0e:06:
9e:20:66:04:32:1e:4b:8e:0a:3b:3e:42:4a:4b:b5:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DF:3D:BF:63:85:2F:C2:B9:F5:BB:6A:22:F9:28:40:B5:F0:22:A3
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:91:08:0d:e9:8a:fc:55:4c:e6:52:1d:df:a1:0d:94:68:
b1:d1:18:dc:1c:27:86:e6:4f:86:a0:ce:14:33:85:1a:2d:91:
b5:7e:10:17:a7:00:61:13:89:24:7a:c6:77:54:7b:a4:d6:20:
fe:9b:35:e2:e2:2d:8f:48:0f:02:39:e2:a9:b7:ff:ca:5f:a3:
43:0a:c9:74:cb:a1:22:8f:e2:6a:ca:75:36:48:20:0e:36:af:
3a:83:39:f0:63:2e:06:58:4f:00:17:ac:2d:b0:78:d5:b7:24:
60:bc:90:49:11:05:05:68:b2:53:1a:75:6f:61:d5:c9:6f:84:
71:80:c6:a2:90:90:e4:f4:17:00:6a:13:3c:66:d2:07:22:6b:
dc:f6:b9:10:f2:97:3e:70:e2:8d:ee:e3:e0:bb:c1:97:29:12:
60:5c:1a:96:8a:bf:10:bd:a4:84:f7:24:8f:98:71:ba:6c:4e:
ea:09:e6:f2:a8:8e:6c:01:49:c5:ea:81:a0:f9:d4:a6:77:2c:
f1:85:bd:3d:2f:98:ac:a4:93:9a:6d:83:8b:7b:3c:56:a3:79:
d9:20:be:af:c2:7a:64:41:16:0d:19:26:83:ff:1c:55:ff:c4:
0c:a4:ed:c7:4a:25:db:1c:6c:4d:88:1e:5e:a6:b1:08:08:10:
25:7f:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:22 2025 by rpki-client