Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: XBRpSMgUgX4SeHfN2UwpBEoQdwyiirYggZPVey9wGsI=
Subject key identifier: 9B:D2:F9:39:BE:01:9F:AE:D9:A7:EF:45:BE:AB:7B:B5:C3:78:37:84
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 0197CDCCE07AF61D36A15A69E5FD03B11282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 0454
Signing time: Thu 03 Jul 2025 01:00:45 +0000
Manifest this update: Thu 03 Jul 2025 01:00:45 +0000
Manifest next update: Fri 04 Jul 2025 01:00:45 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: /oTv0o5up0cpsJUN2DWjHG/5rohdHE53quEhZHNOfdw=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cc:e0:7a:f6:1d:36:a1:5a:69:e5:fd:03:b1:12:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Jul 3 01:00:45 2025 GMT
Not After : Jul 4 01:00:45 2025 GMT
Subject: CN=9bd2f939be019faed9a7ef45beab7bb5c3783784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:26:a2:ba:b3:80:14:a2:ba:ef:b1:12:29:
4c:55:8b:0c:80:ff:63:54:4a:b6:24:9a:2a:9a:c6:
3d:2c:52:30:ee:2d:0a:8c:4b:ba:67:7d:a7:65:7e:
86:7a:54:93:48:49:a4:e6:8d:df:d7:52:35:ca:4b:
10:80:3a:4c:ba:e5:1c:4c:96:56:6b:22:81:30:c8:
cc:52:64:34:72:72:5d:57:2c:c9:9b:bd:bc:69:bd:
90:f0:24:98:05:f2:61:85:dd:3d:60:05:80:1f:46:
a5:63:49:10:9e:6d:c9:f5:2c:96:0a:3c:f1:0b:81:
28:32:56:ab:28:97:18:e3:3d:67:de:03:dc:16:78:
a0:6b:a5:1c:c4:d6:85:37:3e:3b:b4:21:5b:bc:52:
78:1e:5b:40:48:7f:14:e8:ef:a0:0e:65:97:07:38:
85:22:8e:b0:a4:a0:77:3f:bf:70:e8:91:b5:c6:bc:
92:2b:48:d5:db:94:67:bf:72:50:f2:ed:9e:d2:c6:
a7:b1:72:a7:62:cc:8f:81:3d:2c:ac:c3:28:4f:27:
01:68:df:b3:07:94:97:4c:eb:a8:95:d4:8d:a9:89:
79:cb:fb:2a:96:88:53:9e:39:2a:4d:3e:d1:60:5e:
4f:8b:c4:50:ed:18:c4:5f:0c:93:b3:1e:99:18:f4:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:F9:39:BE:01:9F:AE:D9:A7:EF:45:BE:AB:7B:B5:C3:78:37:84
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f1:8c:a5:d2:b6:17:e8:5b:73:af:42:31:64:c3:03:65:2a:
f3:b1:61:85:8e:f3:a1:7b:83:66:df:89:ab:80:60:a9:a8:3c:
65:95:32:77:dc:b8:54:39:c4:40:ad:9d:d2:de:02:d3:65:4d:
8f:41:0f:26:3d:cb:53:49:ce:dd:19:ee:03:1f:7a:78:a6:48:
9f:53:36:4f:67:3e:48:12:8f:a0:31:f8:fa:cc:59:ad:01:17:
84:45:a7:20:4f:68:59:4d:5a:37:c8:a9:c4:76:73:17:b1:40:
ff:41:b5:23:bd:76:cd:9c:9b:f3:d5:f3:5d:10:c6:28:39:b7:
31:81:0e:dc:0a:a5:d4:e0:ff:e7:bd:48:27:e0:df:67:70:4b:
6a:c9:b9:81:2d:f3:0f:97:69:2c:ce:b2:b6:ef:5a:d5:3f:79:
c3:71:35:d0:c5:cf:54:b4:a7:4e:59:b8:02:cf:fc:41:81:64:
32:3d:cf:56:4c:b1:f5:2a:17:4a:e7:6d:96:13:85:3b:53:da:
77:cd:d7:b1:3c:b0:df:d9:90:09:a7:f3:00:a8:43:eb:86:c2:
17:da:8c:69:12:d3:f0:fc:07:53:21:42:b2:0c:1b:47:6d:09:
0a:bf:2d:63:bf:7b:3d:fe:9a:c1:27:f4:ef:7b:68:73:a4:e7:
d8:9f:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:13 2025 by rpki-client