Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: JU+cO+irpnCqFcqyfstH5wa9NvHmA2c13QbyWv5kNy4=
Subject key identifier: AB:64:E2:D0:B8:E4:2C:55:EE:4B:AC:91:03:4D:F9:05:A5:6A:52:FF
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 0197B70EB5FE934FFA5140C1BFF6E3920622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 12B2
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: GJrNU2CIgQVBGdjjLcwz0SVcn8L2KyFPgRsXXQpwVdY=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b5:fe:93:4f:fa:51:40:c1:bf:f6:e3:92:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=ab64e2d0b8e42c55ee4bac91034df905a56a52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:08:9a:74:a7:79:31:60:2f:aa:55:4f:10:
56:ce:7d:25:53:be:6f:7e:e1:ef:d4:a1:22:98:f4:
f9:eb:30:17:aa:d7:9b:e9:2b:78:9c:04:73:c4:dc:
15:16:f4:e8:4e:d2:2e:eb:fe:ec:ec:fa:e7:54:08:
45:d3:d5:f2:09:a1:bd:b2:81:a2:c7:50:8d:29:b4:
3f:98:4d:fb:76:fd:ae:f6:30:27:a8:86:43:9d:7f:
eb:ce:81:d6:2c:5b:6f:22:5b:06:cf:0e:aa:69:15:
59:ff:4c:69:cb:31:aa:f7:1b:e3:77:6f:99:72:75:
dd:d7:e9:d8:ff:20:67:1b:98:af:5a:87:0a:2f:01:
23:2f:a5:e1:6b:0e:50:dd:4e:e5:22:3d:45:44:3c:
eb:a5:13:b7:44:5c:62:30:0a:a4:7e:4d:e0:1f:dd:
f0:3c:e5:b6:21:3f:16:2f:47:70:95:2e:11:4a:07:
b6:76:30:5f:ea:c3:b5:1c:e2:34:f1:ba:38:16:ec:
62:f0:8d:90:58:40:a0:83:d9:fd:95:bc:89:14:0a:
0d:fa:cc:3f:2b:d7:17:d9:10:a6:c1:9b:c8:e0:c3:
ab:c1:6e:23:1f:b4:68:d1:e3:03:55:3e:9f:09:4f:
38:c5:29:42:6a:ef:d4:c6:fa:63:66:56:40:52:a0:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:E2:D0:B8:E4:2C:55:EE:4B:AC:91:03:4D:F9:05:A5:6A:52:FF
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c5:8f:af:45:f0:82:26:51:db:8f:4d:0b:a1:0f:96:ed:e4:
35:93:c3:63:71:f6:7a:e3:cc:7e:30:a1:64:dd:e7:17:81:ec:
b8:1f:4b:b8:6b:7e:b6:f0:b3:47:16:e9:cc:47:32:32:c3:df:
ba:92:c7:65:7b:65:0b:b0:c6:34:13:40:11:af:91:95:85:af:
c8:8a:30:d1:15:1e:d3:e5:14:6a:ed:85:1e:b1:10:0e:6c:bd:
fd:7e:c9:c5:10:39:1c:e8:59:f5:eb:af:2f:15:7d:7d:33:61:
b8:9f:7e:b3:0a:2a:88:04:94:b4:d8:77:0a:57:a0:b5:95:62:
eb:4b:98:aa:c4:53:09:3f:8b:4e:c9:5e:3f:f6:05:49:6f:96:
d9:b3:1a:c8:1b:06:58:03:3b:76:70:5f:7b:16:ce:fd:0e:83:
42:81:d8:d3:a7:60:c1:e5:4d:6c:4c:9a:10:47:6e:a0:ed:8a:
32:f5:e0:a1:d6:02:0d:f4:c0:b7:84:00:8a:f5:80:03:12:bb:
df:f9:d5:21:e1:37:de:62:23:bc:3b:37:1d:8d:d9:70:29:1c:
5e:d7:b4:23:6d:4d:74:c8:2c:1d:de:65:01:88:a9:26:27:24:
57:1d:c3:9d:e6:bc:5b:b5:53:66:4c:54:8a:f3:36:f8:b2:ab:
e7:49:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:01 2025 by rpki-client