Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: KPRYVIQI3RB2Q8NH9fRpOgR9TNbZhwwUa8Eoz1FeQnU=
Subject key identifier: 22:DF:AF:AE:CC:5C:87:4E:51:AD:F3:FA:E7:B8:14:B0:DD:03:FF:F7
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 0197C53809BB2110E40B01126A82DB62B27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 04B1
Signing time: Tue 01 Jul 2025 09:01:13 +0000
Manifest this update: Tue 01 Jul 2025 09:01:13 +0000
Manifest next update: Wed 02 Jul 2025 09:01:13 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: 6sSc774drTdYQHd0ZKZnEstrU3m2nwQBwdVJM899rZQ=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:09:bb:21:10:e4:0b:01:12:6a:82:db:62:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Jul 1 09:01:13 2025 GMT
Not After : Jul 2 09:01:13 2025 GMT
Subject: CN=22dfafaecc5c874e51adf3fae7b814b0dd03fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:08:d5:7b:fa:03:66:16:ab:a7:07:aa:ce:
01:73:c3:f1:7a:ce:f3:31:d3:70:f3:f8:53:d8:9b:
71:fc:6b:54:12:57:62:39:ef:8f:a0:a2:ef:8d:28:
8c:d9:27:02:6b:40:49:78:9c:23:0b:17:7e:36:16:
4d:df:c5:aa:83:0d:94:dc:86:e3:e0:78:e5:2b:9f:
78:4a:ba:31:85:67:64:0f:6c:cc:c5:46:b5:0f:76:
0d:74:b9:0a:02:24:5b:57:e1:42:d1:f5:93:12:01:
69:96:e8:12:fa:16:56:e5:76:87:2b:28:e6:b6:de:
ef:8d:8d:12:13:4f:cd:63:62:11:5a:a9:b3:87:3e:
38:e7:94:aa:30:99:36:43:54:04:a5:cb:af:4a:f4:
68:b4:3a:9c:1f:fc:31:21:fc:d6:ed:d0:95:fb:52:
db:b1:64:21:bd:d9:a4:b2:bf:e6:00:fc:f4:79:59:
1e:b7:f4:08:b1:dd:b8:dd:b8:0b:72:72:58:36:32:
59:24:ba:bb:20:78:97:69:53:e2:8a:b9:85:6e:6b:
9d:41:e7:50:8c:6c:b1:d8:90:e2:0f:51:87:e9:19:
45:f6:cc:92:51:44:34:4f:0c:e9:0b:88:53:18:af:
de:88:43:60:b6:03:64:9d:4b:c0:a9:31:89:98:4c:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:AF:AE:CC:5C:87:4E:51:AD:F3:FA:E7:B8:14:B0:DD:03:FF:F7
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6d:f5:d5:db:38:a7:3c:3c:bd:6e:dc:5c:03:14:99:a9:f1:
b0:dd:b3:78:50:95:06:23:7b:30:fe:1d:fc:e2:33:1b:0a:9c:
4b:0a:9b:a7:20:81:37:c6:10:01:84:a5:12:2b:a5:a5:1a:84:
ae:d6:44:95:50:2e:bd:bd:1b:ce:31:f0:2a:30:38:b3:2d:8e:
b2:cb:f2:54:73:14:e8:9b:f9:72:14:c4:c3:50:69:39:7d:48:
51:c0:85:47:c2:e6:f6:cd:83:88:4d:77:8e:5f:a5:d0:98:f5:
b4:ad:e3:9d:b7:72:7a:2d:0f:bc:5b:0b:83:50:e9:ee:dd:4c:
d9:9d:5c:91:f8:b3:36:e6:d1:e8:2f:d8:7d:15:92:bf:f3:3d:
c3:8e:01:ba:7d:fb:b0:c1:4b:70:da:f0:b7:15:37:a0:38:94:
96:6b:e8:69:30:5f:01:bd:c9:78:2c:22:38:b0:5b:a4:f6:f3:
6a:52:77:da:4d:be:55:53:0b:87:30:87:1b:2d:37:da:60:82:
fa:23:85:f2:57:0b:c4:73:c9:07:e1:0e:b0:df:74:83:65:c4:
a2:15:03:e2:03:38:89:8d:c9:73:72:03:85:45:dc:44:6a:5e:
37:08:6a:88:f3:16:a1:fa:65:fe:18:fa:33:33:ec:82:35:99:
24:ef:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:48 2025 by rpki-client