Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: YY0qJFAEA+D4J1rQSZb6nFQVhSmjmmW6ONBz7LHfXVU=
Subject key identifier: 35:E9:45:AD:25:93:67:2C:64:D9:EE:14:43:1F:DB:68:53:79:9E:9A
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 0197B74535720C284040C28A5F18569CD42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 0F68
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (hash: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: Rwzbgh6FiVRbQGUaJ6hp9XInxacWJ6/ic4eSsYzhAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:72:0c:28:40:40:c2:8a:5f:18:56:9c:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=35e945ad2593672c64d9ee14431fdb6853799e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:2c:d0:e6:18:57:53:3f:ad:e8:01:6f:b4:
0c:3c:52:76:dd:48:3b:10:c3:19:8b:71:1c:e8:1d:
b9:dd:e8:f3:ba:26:55:60:71:0a:2e:a7:78:4b:14:
f0:d7:b3:a1:71:b1:71:7a:e2:0f:25:e5:a8:52:6d:
50:cf:4d:83:d7:09:e5:a3:b8:ef:58:71:c4:45:a7:
14:80:a4:91:d9:f9:cf:ae:69:68:e4:d8:ea:c9:e2:
9e:0b:ea:f6:4e:e5:29:46:f9:f9:ac:83:ef:5d:ae:
2a:5d:7e:78:48:01:42:01:91:9f:50:3f:ed:22:de:
70:64:df:d4:f7:d1:e4:e6:cf:69:48:d1:4e:e8:06:
6e:41:d7:20:dd:8c:45:d5:89:b4:b9:7f:43:2f:f0:
7a:42:42:eb:52:54:e0:3f:9a:74:cf:23:57:65:92:
31:27:f5:e2:c8:b6:be:f8:65:13:e9:3e:7f:48:ba:
6b:4d:80:6f:12:a1:58:46:f9:fa:4a:f0:ad:67:0d:
74:01:f5:11:de:35:a5:8c:2d:8b:e3:7a:f8:75:07:
15:b3:41:ec:19:91:d9:aa:2b:45:56:21:63:35:b0:
b2:2f:ca:b8:8b:cb:a1:12:f4:2a:7b:16:02:a6:94:
4f:ac:bc:e6:8f:7c:8d:cb:7f:87:35:84:f8:4c:6d:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:45:AD:25:93:67:2C:64:D9:EE:14:43:1F:DB:68:53:79:9E:9A
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:aa:1b:8e:48:ff:b4:3f:dc:95:8e:8e:6f:f6:78:08:59:0d:
7e:c4:19:c6:1f:17:8e:f7:2f:d7:de:23:f7:f3:47:34:26:d2:
2f:6a:fe:96:82:e5:d8:31:21:f3:f1:47:02:67:37:91:64:3c:
7c:d2:0e:97:c1:73:53:d1:42:4e:1d:25:a7:bc:13:df:c9:ab:
f5:5b:d5:4e:2e:0e:ae:cb:ee:1e:b8:7b:56:6e:3e:9b:b7:8b:
2d:13:71:08:70:ea:0a:12:17:9a:d8:14:79:34:a6:2a:3d:75:
28:f3:e6:6c:6d:fa:43:0a:83:ae:5f:0e:03:53:e1:9f:fa:ac:
ad:6d:ef:0f:9b:14:9e:10:4f:f6:a1:7a:75:b8:31:7e:d3:3c:
bc:ae:a8:56:25:03:97:0c:2e:df:48:a0:d7:d3:73:0c:3e:c0:
12:dc:61:6c:17:5a:3b:1a:54:01:90:64:80:63:87:f2:5b:8b:
9d:9d:e8:cb:4a:df:8e:99:d8:01:b4:92:c2:ce:f7:a5:13:76:
e4:04:76:c7:1f:d3:04:c6:d9:0c:a9:ac:07:4b:c0:42:30:65:
ae:40:a2:a9:a3:dc:9d:44:74:4a:5d:54:d1:73:37:e8:ff:c0:
7a:27:15:dc:e7:ef:4e:62:b0:21:73:3f:db:00:ef:6a:77:2f:
a5:d3:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client