Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File: 79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier: tyIkkmlCoXcYZmHCF4+amAqfqxo45sHjUCLupBm5C18=
Subject key identifier: CF:D5:68:9A:F6:E3:DB:49:C8:3B:0F:10:4C:24:DB:57:16:F4:6E:F9
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer: /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial: 0197B6D7A1DEEE1EED77738EB5E6018A027F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number: 148C
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: lIMbz2n0G85IcbbUs0ZJuTZoGTvGerjZqwrhCu39x6g=)
2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a1:de:ee:1e:ed:77:73:8e:b5:e6:01:8a:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=cfd5689af6e3db49c83b0f104c24db5716f46ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:0a:7c:93:21:f0:f8:22:c8:3b:78:b4:14:
46:5d:87:af:78:48:54:bf:db:3a:b4:5c:81:43:93:
f6:57:a6:27:ce:ed:d3:6e:fa:56:03:99:c9:2b:17:
43:72:c2:7e:f7:c9:ad:d5:b9:ee:c4:2c:fc:1c:18:
e3:a5:67:21:e9:7f:42:fb:af:ad:29:f9:56:02:f4:
46:e6:62:3a:43:8d:b5:57:8d:90:31:97:e1:5b:e1:
2e:1a:8d:91:e1:93:be:50:3d:f9:3a:60:65:99:97:
10:41:91:ba:b5:6e:74:62:14:81:a8:ec:7e:23:63:
9f:68:df:0f:85:af:af:51:25:01:e9:60:1e:f5:6d:
36:b9:a7:5a:d9:b8:43:ec:27:d5:6e:93:7a:d9:0d:
75:91:aa:07:27:af:51:d2:b5:d4:5d:96:7e:d2:af:
d6:c6:b1:07:bd:75:9f:50:f3:f7:4b:06:fc:23:68:
5f:5b:d1:56:55:94:f9:c5:2b:e2:7d:85:ec:14:ac:
61:5c:84:7d:1a:93:e4:2c:d5:ba:73:4b:ec:d0:d1:
c6:0d:54:9d:35:fc:96:d3:95:fa:d7:cc:97:35:67:
f0:e7:4d:40:ec:6f:56:be:81:8c:2a:d1:dc:aa:ed:
68:af:7c:d4:db:a3:76:f3:a9:5c:3d:65:2a:3c:89:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:68:9A:F6:E3:DB:49:C8:3B:0F:10:4C:24:DB:57:16:F4:6E:F9
X509v3 Authority Key Identifier:
keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6e:e2:6e:b8:cf:d6:31:bc:34:16:9b:98:84:08:a3:9b:03:
e9:7b:f1:58:f2:06:79:02:0a:0e:54:cb:db:d3:13:5f:5e:05:
5d:88:ed:6f:c2:b2:a0:32:f1:aa:35:b1:45:d4:6a:6e:bf:57:
8a:8b:68:f6:64:88:d5:fc:be:ee:0e:f7:b6:5c:2d:be:7f:fa:
ca:2c:fc:62:b5:7b:90:5f:c9:0d:8d:c0:af:ba:07:28:72:a5:
d4:41:2a:07:73:40:b5:5d:73:34:8d:94:98:c4:21:61:99:96:
e5:c6:04:20:16:18:8e:ea:fd:cb:34:91:c4:2c:61:0d:8f:94:
b6:61:7b:e6:b7:cf:c2:37:ca:ba:64:a4:4d:c9:5d:5a:72:c9:
ba:81:4a:44:ea:e1:26:f8:33:39:02:dd:0f:cf:3a:80:f6:84:
48:c5:c8:b6:61:66:72:c0:e2:ee:4c:11:32:22:6e:0e:d3:3d:
f6:28:6b:d8:fc:2a:7d:55:76:14:93:b2:23:88:ca:39:70:9c:
48:b8:35:7a:7d:08:5f:ec:00:09:48:d1:da:36:01:69:be:e0:
e3:87:f8:ed:16:6d:8d:7c:cc:f2:87:d1:92:7c:1e:dc:50:4f:
c9:81:2e:cd:0a:64:a0:29:f4:c3:69:02:bd:b6:90:72:dc:e9:
d8:97:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:47 2025 by rpki-client