Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: txONWYIFrijCxXBDJFp7ICXizlz/lCD3DgqL8d5QyT4=
Subject key identifier: 2B:28:50:1E:9C:DF:8D:E7:69:2C:2D:3F:54:90:80:65:BC:09:EF:78
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 0197B7459902398D6639E6ABD3CB6319F7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0827
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: DgEp6K6aEljZ5Krnw+DyWw+ABB88TLvZAexMSB5b6Js=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:99:02:39:8d:66:39:e6:ab:d3:cb:63:19:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=2b28501e9cdf8de7692c2d3f54908065bc09ef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:7e:95:11:80:7d:c2:c5:a9:b8:53:2f:72:
3c:a5:48:a7:e4:03:05:69:ee:04:6d:de:ae:0b:12:
90:1a:b5:3b:ee:aa:85:cb:a9:35:40:11:5b:f3:93:
ab:a7:f0:68:56:23:a3:52:14:92:67:57:bf:95:90:
1b:46:d2:54:9a:bc:66:a4:5c:5f:cf:18:b4:35:57:
ad:12:0a:c9:4f:b0:90:8d:7c:4f:79:eb:d8:c2:fa:
93:07:15:11:6b:fe:43:41:1d:66:cf:9e:90:2e:e3:
e2:f2:22:d5:02:c0:c9:97:2d:3c:d7:fa:63:69:79:
91:15:0c:6e:e7:d8:aa:94:da:e4:46:51:25:74:01:
c6:63:75:46:71:e4:7e:03:cf:60:0f:4e:d8:ad:0b:
a7:c2:77:b1:70:7d:67:a8:b0:e9:46:b1:77:ba:30:
61:7e:8f:b0:d0:a3:07:07:aa:01:02:88:5b:cf:ce:
f7:10:2f:e7:bb:93:d6:ce:3f:b4:c7:c9:07:5e:b6:
ca:ba:ee:5b:6e:08:99:22:66:03:73:a8:d6:a7:71:
96:3e:5c:d7:ee:37:c8:52:0b:d8:a4:83:54:cb:e9:
e7:90:d0:b1:5d:0a:28:c2:ae:24:6f:8a:d0:cb:b7:
00:c0:a5:98:28:b9:54:bb:ec:5c:52:bf:04:b2:61:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:50:1E:9C:DF:8D:E7:69:2C:2D:3F:54:90:80:65:BC:09:EF:78
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:81:56:a1:13:6d:4b:52:4e:b6:7d:87:1d:67:4e:43:90:82:
bf:13:77:96:78:07:04:56:df:46:b3:ff:74:09:22:84:71:d0:
ff:c6:64:cc:f4:29:74:f2:24:d5:60:f3:28:b6:69:fb:15:78:
41:71:40:be:6d:67:99:7d:57:2f:c0:d8:3d:c2:7c:4d:dd:53:
58:54:f2:9e:c7:9a:6d:73:16:25:fd:9a:ec:89:f2:c2:55:3c:
92:de:cc:71:ac:a0:aa:41:19:95:b1:39:b2:22:40:56:37:b3:
5c:32:36:69:94:62:95:3c:55:46:4e:0e:05:af:87:67:07:04:
ee:b4:4c:88:78:83:55:40:20:07:c6:9d:80:61:98:76:99:6c:
c8:84:ab:16:0b:01:78:78:44:ae:1d:9a:e7:f8:87:91:f4:ad:
eb:3f:54:89:0b:04:1b:a4:85:5f:d1:bf:5a:0a:62:19:40:73:
1c:f4:69:47:ed:e8:b0:67:c2:3d:66:97:b2:ee:5e:5b:e4:03:
ba:2b:1e:ca:b8:0c:17:43:6c:17:c3:9c:b8:f6:64:73:40:f6:
cb:28:64:d8:4f:af:03:1f:90:c5:ed:21:b7:21:26:67:e8:fe:
d4:68:80:45:c8:cf:52:19:85:7c:2d:49:c0:a9:29:42:78:4e:
b4:0e:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:36 2025 by rpki-client