Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: 2Mn77yJnOyBRMEICp7Pqz8BKZ/N5Uup1u7HIo4y6mg0=
Subject key identifier: D7:0B:C1:87:6E:3C:92:A9:FF:16:0D:D5:72:CF:66:FF:13:DA:B2:C0
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 0197B8FCE6A0FB72C27744D0A1D42869435F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:11 +0000
Manifest this update: Sun 29 Jun 2025 00:01:11 +0000
Manifest next update: Mon 30 Jun 2025 00:01:11 +0000
Files and hashes: 1: 1-15VXX8nVt-lY3LiGzv1Jr6OcwM.roa (hash: SlkmWz0jcL6xUXUhTFQpLdotJEVgcyVB/xztx7GovmM=)
2: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: 7u91DspgqIlwSKq7XrXsAme9H7Gs9qHQ0ysiQK/y/sw=)
3: gp4Lcl-XthpiQz3Pgjj2aofu5Eg.roa (hash: +WQhnu3iWgtDqgj16Fdo45N/RQNl/1eQLYZcURm+NBk=)
4: tMCKKQ7T7_7JMjdc5UvMftnS0Sc.roa (hash: kzZ53feDoHQUM5QIs7aC6l1igadYhsq3pYnx3tG/SUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e6:a0:fb:72:c2:77:44:d0:a1:d4:28:69:43:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Jun 29 00:01:11 2025 GMT
Not After : Jun 30 00:01:11 2025 GMT
Subject: CN=d70bc1876e3c92a9ff160dd572cf66ff13dab2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:a8:77:7e:fe:e2:29:7b:7d:0d:ce:3e:92:
78:e0:51:e3:f6:92:a9:6f:ac:09:18:eb:02:41:31:
b5:db:c7:8e:4d:3d:77:c5:ee:50:6c:8d:c1:b4:f2:
10:b4:7c:0e:76:8e:f3:e0:55:eb:e8:2e:59:bb:bf:
08:2b:01:2a:62:c2:05:1b:82:37:c2:46:a9:2f:da:
98:f9:af:05:95:cd:51:20:ce:85:b0:93:ac:f3:18:
f6:d2:99:50:24:3d:d6:0e:e7:d9:b1:1e:06:04:a5:
67:ad:9d:31:51:f3:6c:f8:d6:34:fc:4b:3e:68:d1:
ca:56:a6:89:e2:46:5f:28:98:01:f9:10:16:57:b9:
f4:18:5e:3f:0d:f3:8b:e2:9e:24:96:27:1b:31:8d:
cb:46:a2:ca:a8:a3:77:62:a6:ce:cd:5d:79:5c:e1:
49:f4:0a:1c:92:c4:12:36:b8:8a:4c:8e:1c:f5:8b:
c9:4a:07:7d:f4:50:1a:2a:f2:d2:9f:81:57:4c:b2:
13:4b:4c:66:66:8b:58:ef:46:34:52:8c:25:8d:2a:
e3:56:47:be:14:97:e7:12:86:e4:7f:7f:d7:18:f5:
af:4f:e7:84:4a:62:d5:39:f8:1c:cb:4d:15:a9:01:
43:0c:40:d1:30:ed:e8:b3:a9:91:35:28:3d:1b:f2:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:C1:87:6E:3C:92:A9:FF:16:0D:D5:72:CF:66:FF:13:DA:B2:C0
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:e5:4c:bb:2a:77:da:77:46:99:31:2b:5d:d6:db:59:1e:
ec:53:96:1e:e9:56:a6:5e:08:87:98:89:58:b0:59:c7:49:64:
c2:5b:34:ee:8c:12:ce:ab:16:58:30:d6:83:a1:2e:b3:39:df:
f3:15:51:c2:0a:85:16:1c:20:e0:f9:8d:d3:91:16:88:c1:e4:
27:1e:f4:0c:95:fd:81:f0:b2:8d:94:cd:a4:96:6f:b3:9e:6b:
a8:12:0f:90:4a:36:69:0a:5e:bb:49:d4:ce:ff:5e:87:bb:bf:
75:2f:20:b7:e6:f6:97:3e:aa:1a:8e:54:4a:17:29:fe:29:72:
61:de:11:05:ca:5e:99:47:64:16:88:df:b8:1c:24:c6:c7:0d:
40:2b:b2:1b:fa:26:c9:d1:21:45:e5:a6:e2:85:bb:c7:f0:ba:
3f:0a:41:8a:5e:4e:56:65:1e:fa:a6:36:4e:04:b8:22:32:13:
c8:e8:f1:f9:b1:47:d7:b0:d9:45:e5:f5:e7:91:44:a1:3c:c0:
39:29:af:ab:c2:12:e4:c8:76:1e:76:e1:a3:c6:5d:ac:73:f4:
45:83:78:7e:c0:e7:7a:60:4b:b4:15:2b:8f:94:fc:e2:37:16:
d3:b3:49:b6:5c:6f:40:31:58:c5:92:2b:8c:db:bc:3b:76:74:
3f:4d:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:13:32 2025 by rpki-client