Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: +KlRLf0YG0jm4pvL09jpgTaK/2RfVIUQbVurX97zpVM=
Subject key identifier: 43:74:B6:FF:F3:D5:1E:CB:54:CE:69:DE:81:06:89:93:9A:06:36:D8
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 0197B821025A6CDBB462639484A799085F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: eEnattH2K4w68V8Y/EZWk86+JRNsPCqI13KoV/KhyfU=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:02:5a:6c:db:b4:62:63:94:84:a7:99:08:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=4374b6fff3d51ecb54ce69de810689939a0636d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:c8:cb:b9:4d:36:84:50:22:7f:11:c6:c7:
5c:60:91:63:7e:bc:b5:72:9b:43:a7:93:3a:1f:1a:
f6:e4:73:b0:2e:ad:79:9f:73:a9:67:15:6f:da:62:
93:74:e6:7a:88:d5:5c:e8:91:be:12:76:30:df:5d:
f5:be:58:90:60:9c:25:06:b9:81:83:cb:eb:b1:a0:
77:d8:a1:8f:47:f4:75:46:b9:bf:2a:b8:cc:f7:67:
26:32:c1:2e:8b:db:19:43:38:77:39:89:83:c3:db:
ed:d4:98:e6:b8:3d:f6:36:56:2e:fb:5b:ca:d7:72:
61:d5:b2:14:2f:20:4c:45:15:17:1e:48:3d:8c:83:
23:5d:05:a8:4c:07:1f:b8:56:74:ad:50:62:8b:b3:
8b:43:2f:8a:98:df:ad:f9:f2:af:27:99:2e:bd:7f:
e7:c6:5b:bc:8d:1e:c3:f7:5f:5d:f9:aa:c2:75:f0:
4c:59:c9:6e:33:92:a1:81:7c:9d:83:27:22:0d:e2:
71:06:b2:8b:9f:5f:11:1d:d3:51:09:da:8a:13:ff:
6b:a0:27:62:52:93:ae:c1:81:04:e4:20:61:ed:eb:
42:89:e3:f1:2a:43:b4:2a:dc:c1:38:7b:7d:c1:95:
c3:37:77:c0:33:86:54:c6:25:2c:59:9f:11:3c:4d:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:74:B6:FF:F3:D5:1E:CB:54:CE:69:DE:81:06:89:93:9A:06:36:D8
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:d5:40:1d:c1:e1:3a:61:7b:12:d3:44:4c:4e:3f:2a:75:
38:42:d8:91:cc:6c:19:36:ed:a0:1c:20:b1:7b:77:c0:b8:fc:
7d:e8:5d:a5:98:1a:25:d9:98:c5:93:7b:25:74:be:f8:f4:a5:
f7:82:14:dc:37:11:af:2b:b3:60:8a:fe:6b:45:5e:08:67:2c:
45:37:9f:af:da:f8:b1:93:57:b5:c8:59:65:ee:b4:2c:49:85:
7b:8c:e5:ff:50:b9:89:b7:d4:25:e5:fe:b2:5f:7f:00:10:e8:
05:ef:71:ec:d9:83:d2:cc:22:3a:f5:2e:05:e1:da:b7:8c:7e:
4d:2e:ca:a6:26:e8:46:55:aa:48:30:2d:78:97:76:1f:77:d3:
b9:56:63:99:66:27:d0:96:75:4f:6b:5d:8b:18:8d:80:8b:05:
6a:66:a5:6e:f3:57:0d:98:20:26:3d:bb:1b:a5:c7:bf:77:19:
f1:72:ac:c0:77:32:f4:ad:ee:b2:2e:94:ba:b6:a2:57:88:87:
fe:b0:57:8a:02:e9:0b:4a:9b:7b:5a:c6:5e:8e:65:82:66:f5:
6a:04:02:e0:fd:1d:1f:44:3c:28:c3:bf:d4:4a:7a:dd:11:e9:
ba:aa:a2:f1:3e:0a:d1:30:78:a4:82:28:ab:e9:43:02:f6:c6:
e9:4d:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client