Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: 2ryUVtww9z5ZDBpvj54FhqlDCXqmzBDMm39yU7j5ryY=
Subject key identifier: 2B:D5:A1:E2:E9:6F:B9:E1:78:FA:51:03:27:D5:E6:11:C3:1B:98:49
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0197B70ED2238BB057C5C753099FBD603AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 139E
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: Dj+AsrldhcxQhK/CKhHBgCgbKIKkyDsS/q1c7k7VW4s=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d2:23:8b:b0:57:c5:c7:53:09:9f:bd:60:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=2bd5a1e2e96fb9e178fa510327d5e611c31b9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:2f:c6:6c:73:50:b0:40:90:a0:6e:27:5c:
a2:c6:b1:d6:95:bd:ec:b5:f1:33:1b:0a:1a:92:42:
15:68:ee:d4:bc:99:ef:3b:f9:f0:85:7a:b2:50:54:
60:50:a5:9e:4c:01:9e:57:0d:89:42:f0:6c:57:62:
1b:11:13:e6:5e:a8:e4:ba:f3:14:a0:6d:86:21:ef:
6f:6d:fc:65:60:d4:c9:1a:a5:82:da:71:9e:8d:b9:
17:17:6a:13:24:9c:6c:ea:21:31:65:99:32:19:99:
1e:f3:c9:34:a6:36:87:49:bc:d9:5c:d5:8e:51:74:
66:91:e3:35:3c:54:f4:db:1d:48:d1:49:4d:04:45:
68:10:73:4a:5d:51:e9:c5:4f:c7:1a:9a:a8:62:22:
72:2b:10:c5:13:a8:00:00:0a:d3:07:aa:65:6b:77:
ad:93:17:bc:2b:f2:f1:d5:ea:e9:1a:4f:c5:0f:42:
28:c5:3c:3a:fc:b6:37:c7:88:2e:68:a8:4f:d7:08:
db:f8:63:e6:53:a9:39:40:2e:db:6d:55:b5:cc:f8:
33:7f:d8:1d:4d:6c:db:cf:da:cd:96:c4:12:40:a5:
47:80:a4:1f:11:2e:20:ba:0b:d4:cf:f2:0c:5f:7f:
56:c4:03:b7:1c:6f:99:e6:77:46:cb:1c:55:b2:d5:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:A1:E2:E9:6F:B9:E1:78:FA:51:03:27:D5:E6:11:C3:1B:98:49
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:81:9f:6a:b0:fc:53:a8:e2:13:aa:c8:74:d9:64:b8:91:
e9:6f:01:dd:7d:a0:ee:13:5a:a5:00:d2:9f:1a:7b:59:69:3c:
d4:30:fe:69:34:cc:75:8c:df:b0:58:7a:7b:a1:10:1d:c5:82:
5e:a6:b5:39:09:04:32:7e:a4:52:64:54:20:0b:52:fa:03:b0:
8f:94:8b:6e:e7:ca:9f:9b:8d:e3:e1:90:df:1b:e4:64:1d:c3:
d2:76:cc:4a:05:45:c4:a9:e9:46:a6:4b:fd:c8:b9:f6:ad:ac:
2e:95:93:ac:0d:60:17:94:34:7b:80:8c:9f:16:ae:78:f8:80:
ce:96:7a:f3:e0:f0:c9:d7:aa:fb:c9:18:3c:95:89:35:59:0d:
fc:02:de:be:8c:ee:30:5c:4f:c2:e0:92:e3:60:c3:39:38:01:
2d:5f:b4:50:b1:a1:9d:66:0e:0d:a7:cd:65:eb:2b:21:84:ad:
62:c4:eb:a2:32:54:a5:fc:50:0c:5f:64:c6:22:7e:6e:11:73:
ff:c1:ac:81:e1:b7:4d:7e:5f:66:72:7b:cf:8e:5d:af:cb:0a:
98:10:5f:09:bd:71:a9:99:12:03:1a:a1:ed:74:1f:64:a5:5f:
90:fb:75:c9:6b:af:3f:38:38:ae:6d:25:4e:17:e9:0e:ca:66:
54:dc:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:55 2025 by rpki-client