Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 5drsBhhEpXlFqzzA27iT/iRq9WZ0Kdc167zjrPB4x1g=
Subject key identifier: 87:C6:6D:37:94:9D:C3:49:41:93:6A:1F:DE:AC:3C:6C:D7:F1:60:DB
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0197CB70A619FEE40A494CF0B299F5BE6FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 14:00:46 +0000
Manifest this update: Wed 02 Jul 2025 14:00:46 +0000
Manifest next update: Thu 03 Jul 2025 14:00:46 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: V94tRtp/aEe8xKAcEkKWa4P6juBAIJmPtRIz7k4AQUw=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:a6:19:fe:e4:0a:49:4c:f0:b2:99:f5:be:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jul 2 14:00:46 2025 GMT
Not After : Jul 3 14:00:46 2025 GMT
Subject: CN=87c66d37949dc34941936a1fdeac3c6cd7f160db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:51:74:65:54:73:64:d4:7c:37:b1:c5:c3:
47:06:71:7b:c5:5d:c6:db:00:0e:99:81:f7:aa:94:
a2:5c:13:ac:b6:2d:c5:ca:e1:c3:c5:37:46:0e:71:
90:ba:83:96:b0:a1:51:fb:88:c8:08:c9:11:b8:93:
af:e5:0f:62:5e:47:25:de:47:6c:d9:5c:27:47:8b:
f4:69:12:25:98:94:af:58:fe:95:a5:95:af:d5:bb:
33:dd:36:66:1b:14:53:b2:00:3d:07:9f:42:5c:71:
fd:a1:32:f4:68:f1:a9:5e:5c:a5:80:a0:44:67:6f:
7a:77:12:a5:45:d8:a6:da:e6:3b:1c:d4:59:1e:6e:
58:c8:0f:e4:ce:8e:08:e5:68:9e:b9:14:69:f3:ca:
7b:e2:6b:7c:aa:50:7b:76:ed:f3:a1:b6:0a:09:90:
da:bd:b2:0d:09:bb:3f:a7:26:23:e3:21:08:86:6b:
70:22:03:0d:6a:d9:ce:d9:b9:7b:fe:95:99:36:23:
07:d2:dd:71:f2:72:24:fd:48:a3:d1:6b:05:b3:c6:
be:b6:93:31:ba:69:df:52:7f:98:db:ee:3a:ca:88:
c1:1c:ea:3f:5a:d8:25:ae:70:55:b9:89:6a:2c:e9:
20:6c:98:83:fa:26:a3:81:9c:40:0a:40:89:a1:37:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:6D:37:94:9D:C3:49:41:93:6A:1F:DE:AC:3C:6C:D7:F1:60:DB
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:16:0a:fa:ef:f6:10:68:a9:37:26:dc:47:92:af:2c:36:ce:
01:b8:c7:da:b6:12:9c:29:a8:53:9f:a9:15:b3:2c:e5:d6:c6:
6a:7c:17:c2:35:1f:5d:0a:21:c8:3e:3f:85:ca:0b:29:fd:51:
96:91:70:06:69:67:33:d3:9f:af:66:6f:9a:3f:1d:c4:38:77:
c0:b1:4e:da:c7:a5:65:0d:a2:fd:34:37:b3:04:2a:94:13:85:
68:a5:bb:22:ac:91:fb:c8:c3:01:58:3f:d9:6c:cc:da:76:b4:
3a:d7:ea:5d:23:66:a8:eb:8a:70:a9:d8:60:84:23:b9:6b:b7:
dd:31:b2:90:d4:a4:83:94:54:d6:2f:c4:8c:01:ed:8b:0a:c2:
7a:07:8e:ad:44:e2:3d:97:00:4b:af:9e:eb:6b:a6:a5:60:32:
21:ab:fa:a1:ba:ec:27:2e:a3:2f:18:ac:c5:8a:60:f3:01:33:
73:10:9d:4d:cf:a1:27:e6:e8:b9:49:66:d6:8c:92:bf:11:ad:
12:b2:e2:ce:ca:d1:b4:2b:d9:c0:ef:ca:6f:de:0e:19:9b:97:
5a:60:e3:f4:8c:0a:2c:ab:a6:f3:88:7d:a4:83:2b:36:82:cf:
cf:f2:da:1f:23:e4:0b:a9:01:16:c7:ef:d3:f3:7c:78:2a:82:
d7:29:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:04:08 2025 by rpki-client