Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: x+m+Oa0B4JfK/jD/1rSUrw9x+Wbc/98k4Ul12c5l53c=
Subject key identifier: 02:3D:5C:83:1F:EF:95:92:C1:CA:B5:C3:8A:4D:C8:01:6A:AB:35:F9
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0197B7EA36537FDF69E300CF22450B98EC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: UTzhtHEleoxVLW7QSt2xP4moSQd1vv+HY58hABCs+HM=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:36:53:7f:df:69:e3:00:cf:22:45:0b:98:ec:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=023d5c831fef9592c1cab5c38a4dc8016aab35f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:0f:91:21:18:7b:f8:6e:4e:3c:43:2d:4b:
b7:e7:b7:23:40:87:18:c3:23:3d:34:d4:c1:b0:35:
61:86:da:b2:7e:ca:4a:95:26:5f:cc:a1:3b:79:51:
3f:49:e7:c5:9e:5b:ff:e3:96:9f:1a:e2:05:61:c9:
b5:31:5f:79:ad:fe:82:57:4b:77:0d:2e:01:6c:15:
26:b2:b6:35:14:ba:1f:05:e4:72:54:4b:0d:bc:97:
1f:47:5a:f7:87:c2:89:c1:49:a5:99:5f:6f:47:6e:
d1:f2:d8:4e:9d:3c:29:9a:47:93:db:97:45:78:39:
08:d8:49:10:26:53:a1:e0:5b:8e:11:61:b5:8f:b0:
bb:b9:5d:d6:00:0c:00:0a:59:2d:a7:ae:ea:6a:db:
4a:d3:8c:d0:d0:b8:f8:67:dd:b8:21:f3:0d:9e:ff:
7b:75:04:de:97:7f:90:55:2f:27:5a:04:e4:e5:94:
91:d3:66:f4:c9:d4:38:86:2e:83:6f:c6:08:90:76:
16:ac:d5:f1:06:f1:3f:cc:4e:eb:44:14:14:7b:09:
3f:68:73:9d:db:12:83:60:0b:b9:42:6d:a9:51:7d:
15:f2:11:75:e3:f1:73:26:1d:48:8e:66:26:2c:7e:
5a:40:06:e2:e0:5f:fb:bc:f2:45:a3:94:fe:c5:ca:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:5C:83:1F:EF:95:92:C1:CA:B5:C3:8A:4D:C8:01:6A:AB:35:F9
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fa:02:13:c1:aa:19:65:cc:32:33:39:ea:34:b6:5e:d7:1b:
17:55:8a:d1:48:cd:6c:40:0a:a6:f7:6c:23:1c:5c:3b:28:a4:
cf:f1:5b:66:ae:ae:3a:c9:7b:25:2a:0a:3b:88:de:51:d8:26:
a2:7c:fb:1c:34:fa:f4:4f:4b:39:b3:ea:79:54:fc:8e:67:63:
8a:4c:c8:40:14:0e:03:e1:c8:e8:e4:9c:6d:cc:11:2e:ea:2e:
1a:7c:9c:b2:8b:4c:9a:7a:e0:c3:3d:ff:2a:58:18:4d:ce:4c:
86:a8:aa:a0:f3:3b:87:e5:2b:b8:c7:39:21:2a:84:41:32:be:
69:45:40:b7:10:6a:4e:41:b0:01:14:de:9f:fd:24:13:a1:b8:
dc:0c:d8:ec:c6:5a:63:20:f6:1b:0d:ea:10:82:8f:1e:09:6c:
7f:d2:8e:0d:fc:58:55:0d:2d:4b:09:49:5b:60:08:ed:37:32:
d9:9a:58:47:dd:cc:36:8a:ea:9a:63:ae:6a:dc:24:75:64:56:
9d:ce:e9:99:01:bf:b9:24:bc:c2:b4:fc:ca:f2:0e:6d:65:fb:
a6:33:ac:cb:17:5f:12:d9:27:63:cb:5a:b7:20:a2:56:60:4c:
47:34:8f:54:53:b7:92:ba:98:9a:1a:08:85:df:99:95:24:d0:
1e:f8:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:42 2025 by rpki-client