Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: +G7t/MUd8LbpO/yXrsQ6fZJV0un4pM5ap5+x+gInMO0=
Subject key identifier: 09:F1:26:1C:E5:BB:CB:11:D4:5A:EE:3F:82:9C:6F:97:8F:2F:96:3E
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 0197B745AF99DD6EFA6E5F2F8ABD20060B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: //EnxEXDvD8CxqQpgHw5TaIDSUw+OznF1LZvSscs094=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:af:99:dd:6e:fa:6e:5f:2f:8a:bd:20:06:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=09f1261ce5bbcb11d45aee3f829c6f978f2f963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:29:5f:8a:ee:15:0d:7e:1c:9a:ff:f2:40:
98:1f:39:eb:75:6e:a0:05:88:66:17:46:8a:32:c0:
ee:8a:86:96:40:ec:bf:67:00:4f:c3:6c:fe:45:bd:
68:a8:8d:70:7d:b2:7f:78:92:3f:62:a0:09:6e:9a:
34:e9:6e:af:c8:d4:c7:04:3d:cf:98:f1:f2:60:78:
ce:26:41:cc:31:b6:a6:60:97:61:8b:de:24:79:3c:
53:19:fa:00:23:ba:5f:d3:2c:86:49:fd:4e:ef:00:
e1:32:c9:86:c9:39:6f:12:c2:d6:55:a6:88:72:10:
e6:26:9d:c2:f7:4e:9a:a2:af:fc:38:d0:3d:5f:8e:
02:14:9b:94:bb:2d:70:21:aa:e3:65:8b:66:c2:b0:
4c:98:b6:2c:7c:c7:fb:ad:ee:a6:6f:19:87:86:98:
1a:17:cd:86:3a:f5:4b:33:3d:fa:6b:68:36:55:c2:
e1:4e:77:f5:a5:65:a2:60:bb:ff:c1:0a:74:16:ce:
5e:5d:6b:2f:96:70:f4:bb:4a:0e:3f:e5:9d:e0:29:
3e:4b:d0:da:30:2b:79:86:15:84:5d:d7:3e:4f:03:
a5:89:15:8a:5d:72:63:64:48:e3:db:cf:28:c8:34:
0a:82:ab:ab:13:9b:58:f7:2b:f5:48:dc:67:14:48:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:26:1C:E5:BB:CB:11:D4:5A:EE:3F:82:9C:6F:97:8F:2F:96:3E
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:bb:09:81:3d:ca:d4:ce:2a:6b:32:b1:5c:c1:6d:9d:b1:
e1:70:c3:3e:15:d7:c2:ed:80:a2:3a:5c:23:2e:01:37:69:4e:
f7:54:37:05:ff:c2:f0:82:22:6f:e5:8f:da:c2:08:23:0b:d3:
48:e1:ba:ac:b6:b2:3a:99:eb:dc:2e:ea:a4:40:aa:77:67:b1:
85:07:e2:3d:40:20:ee:b1:d7:6b:38:89:c3:6f:23:18:17:dd:
6a:87:c2:f3:a9:9c:90:ea:7e:03:37:9d:2a:00:1d:06:51:32:
77:8e:b0:fc:66:55:06:0c:a7:b0:64:ec:2d:63:01:28:54:fe:
98:6e:1a:fd:14:ae:2e:bb:3a:eb:e7:11:82:bf:8a:f2:7d:fb:
e9:7a:01:35:d0:c5:ff:63:84:c0:55:27:e0:26:a6:f8:be:21:
7c:34:ff:46:5e:62:fe:61:02:35:a4:e3:e7:90:7f:16:3a:56:
b5:82:6b:e4:c0:c2:8e:14:d6:a3:8a:d6:b2:4c:ed:37:e4:7a:
6d:2d:a0:ab:f4:a2:ac:f5:a1:ba:ee:33:fb:f2:71:ee:5b:88:
2c:5a:29:17:5a:1e:95:07:f2:51:ed:4d:f3:d5:34:8a:48:73:
ad:3a:e4:c0:8c:8e:fe:a4:00:e7:43:c8:b9:3c:02:a1:aa:ea:
a9:14:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:23 2025 by rpki-client