Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: zYI61NXPeHjoJSDOpYdMJ/7Q5Vih1RP1JbB/xC0EDRU=
Subject key identifier: 49:B8:BB:0A:44:8F:27:C8:18:A6:1B:90:67:3F:36:9E:5D:81:09:DE
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0197B6A1CA3A0197FC3A8C83FF8735E15E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: LSqhkZZ0DBp+ZId4zeve/yWBRbC3FFwwmCTskULvcOA=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ca:3a:01:97:fc:3a:8c:83:ff:87:35:e1:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=49b8bb0a448f27c818a61b90673f369e5d8109de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:c2:fe:6e:c3:cd:19:18:ff:e6:0d:b0:5e:
e9:e9:8e:bf:a1:0a:48:2b:2f:de:90:a1:b2:f1:4e:
13:ea:44:07:51:93:52:b8:4a:40:4d:91:51:d8:a0:
90:4f:dd:ae:5d:5e:6a:eb:6c:6e:60:a6:81:13:d8:
ce:2d:01:0d:54:07:c6:9f:53:a9:60:82:ec:fb:b3:
30:99:29:2e:4d:86:db:a1:12:31:e8:b5:85:2f:98:
de:12:85:77:84:61:1c:ba:1b:d6:aa:4a:e3:6e:02:
48:45:87:d6:e5:bc:30:ff:1e:de:d6:41:75:c3:10:
17:3d:52:02:be:dd:07:01:05:a6:0a:a6:07:4d:24:
c6:6c:37:87:8f:c1:d8:a6:e9:95:89:85:71:fe:5a:
65:d0:0b:0c:a3:67:e9:04:13:59:12:5c:46:fb:f4:
73:91:dc:ec:5b:b8:0c:39:23:e0:5f:31:22:ab:67:
e8:58:51:36:85:9e:e3:26:c1:c0:05:e9:d4:89:7a:
f1:d4:68:f0:fb:1c:63:84:aa:65:f7:3c:76:d8:ee:
c2:84:02:6a:55:36:9b:90:b0:57:63:19:01:97:04:
8a:5f:f2:95:f3:bb:88:e0:0d:81:49:f8:6c:02:bf:
9b:a0:f8:5a:31:5e:69:ec:44:87:e6:13:2e:1d:bd:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:BB:0A:44:8F:27:C8:18:A6:1B:90:67:3F:36:9E:5D:81:09:DE
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8a:d0:88:9a:c7:c1:7b:90:6b:5e:70:4c:8c:44:e4:c6:e8:
54:af:30:bf:5a:e2:c7:b2:2b:c5:f4:47:26:a6:20:21:09:14:
b8:56:3b:75:f4:73:63:13:3d:7c:02:21:13:77:2f:e1:6e:a6:
97:ff:5b:59:6d:9d:d2:05:df:8a:62:7a:b3:2b:9d:c4:d5:8f:
b9:7f:fb:f9:83:d6:89:9e:2a:52:11:e5:4b:b3:ff:52:f2:ba:
11:48:d6:60:1d:5d:c5:f5:7b:d2:3c:23:b4:d6:f4:04:df:25:
75:08:9d:11:ff:21:ea:32:5f:5b:45:ee:aa:ee:99:26:b0:cf:
9f:c6:93:c7:b7:fc:22:37:e3:ab:f5:f1:00:97:b5:06:a5:84:
d4:f5:f4:94:fc:5c:b7:81:41:28:f4:54:eb:4d:05:67:a3:59:
36:17:73:68:70:ab:41:4d:9a:cb:fc:15:fa:e0:c8:93:97:b4:
7d:06:af:32:c8:30:ec:e4:ac:2e:98:f5:39:d4:9e:c5:b8:4c:
e3:77:6b:0a:45:94:96:e0:ca:9a:94:dc:6c:14:c4:13:03:34:
8e:d2:b6:90:e9:93:00:06:c1:46:a9:cc:45:c0:0b:f3:a1:03:
7a:30:aa:da:2d:e1:ec:6b:f8:7b:f1:2d:c8:7e:f7:a8:2f:28:
08:25:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:00 2025 by rpki-client