
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: 6hDGPXYaMrordpctQgs502OqqOV6XfEr9vrWEG61DC4=
Subject key identifier: 02:FE:2B:2E:82:46:77:CD:3C:82:B8:ED:17:2E:C4:4C:CA:90:3E:05
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0197B77CA71A5A0ECA0E1EE78A490CFE7B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 0190
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: jLSLPp6ko4bI5mbcXAxitac0qREGNBX5mwIdILgN47o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a7:1a:5a:0e:ca:0e:1e:e7:8a:49:0c:fe:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=02fe2b2e824677cd3c82b8ed172ec44cca903e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:71:7d:63:3f:fb:66:d7:ce:d9:22:bf:5c:
c8:3b:be:1a:93:28:d7:b3:10:09:c6:cf:96:19:ab:
82:3f:9f:f8:bf:ba:31:9d:91:e2:4f:c1:57:fe:aa:
c9:e9:e4:c8:37:85:8b:82:29:34:6c:10:3e:9a:a1:
6b:05:03:03:72:e0:15:6d:69:03:6a:56:2c:1f:fe:
5b:74:f5:5c:fd:8d:1d:98:e1:1f:f1:8c:b8:b5:41:
a3:d7:b7:88:67:41:20:77:42:57:91:1b:46:e1:a8:
23:bd:fa:29:42:ea:ca:75:8c:94:7c:ac:92:1c:00:
bf:10:81:c5:61:43:16:17:2e:07:2b:83:22:fd:ff:
aa:ec:29:42:96:a0:b8:8d:6d:57:d0:a2:93:23:96:
14:dd:67:b6:25:81:84:09:80:55:f4:00:52:3e:51:
66:4f:2f:91:e4:f2:61:3a:b0:8d:1c:98:56:3e:1b:
c0:c6:4a:cc:65:68:28:8d:2f:9d:5b:78:37:60:50:
de:47:7b:3b:d1:f7:1f:e5:7f:ef:c5:74:14:ab:9d:
57:0b:9c:37:60:92:89:aa:22:40:17:5e:cc:d6:80:
b3:09:fc:48:4f:54:de:c0:ff:b6:88:4b:c2:18:29:
98:a7:6d:78:85:83:2e:fc:8a:1e:34:e0:eb:6c:60:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:2B:2E:82:46:77:CD:3C:82:B8:ED:17:2E:C4:4C:CA:90:3E:05
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a6:17:4b:d7:a8:78:98:88:6f:e4:77:5b:36:cc:44:a9:02:
c8:d4:2d:89:9b:2f:10:8b:a1:d2:45:ad:29:11:23:ce:d2:77:
1f:56:a2:81:53:31:4e:86:f1:aa:05:5c:3e:66:88:fd:a2:7e:
4d:0a:cc:ae:7a:9c:a4:62:43:4d:ff:13:f8:84:bd:0d:de:5f:
6e:26:df:f2:8b:55:5f:10:60:6d:41:eb:3b:17:7b:4c:c5:87:
db:58:56:5c:3b:73:ea:b8:94:8e:73:24:af:56:7c:c3:84:ca:
6d:7a:46:00:bc:11:d0:36:50:a0:0f:63:04:4a:12:6f:70:f5:
05:4e:3b:c6:df:b2:99:0d:91:f0:2e:41:19:52:ef:e3:71:26:
c4:b5:8c:5b:53:68:49:0f:f4:1d:a8:68:02:51:05:62:51:78:
b7:fe:9f:82:11:96:79:51:4a:14:b7:f5:a9:86:0d:ed:d5:58:
c8:1a:43:5f:53:36:15:8f:51:af:2f:ca:2f:0a:8c:3f:11:ea:
20:bd:57:af:22:54:9a:44:57:b3:80:49:8b:e5:ae:f0:85:ac:
51:82:a3:07:fa:4e:f7:47:94:28:30:76:61:4a:15:d2:59:01:
6b:99:39:5e:ff:19:ae:0b:34:57:5d:61:90:c1:d4:f4:80:b4:
9f:3f:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client