Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: RTa3ZNqh0n9dOEHYa52b+6YCvXC7b8/2GWkbgrzpn4o=
Subject key identifier: 47:7F:4D:51:87:15:C9:3A:E4:62:FA:FB:E4:1D:6E:C9:CA:FD:92:9E
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 0197B7B3573A160B2E54ACF30304C8FCC5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0539
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 9JYgkHDN6G+yitftnO15HAUFHSIw83spU5t4pJlAc9g=)
2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:57:3a:16:0b:2e:54:ac:f3:03:04:c8:fc:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=477f4d518715c93ae462fafbe41d6ec9cafd929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:34:f5:e0:63:5c:85:62:ee:e0:f1:a1:ac:
9b:73:3a:30:90:5e:95:9d:5b:29:a7:aa:d6:10:ef:
92:5a:f4:26:b4:0a:99:84:0c:54:e8:bc:07:95:8a:
a3:7b:bf:ff:2f:04:01:af:2e:af:67:93:cb:56:2c:
22:f8:e1:a3:9f:30:aa:c8:c2:70:63:70:05:7e:d8:
61:4c:31:eb:38:92:6c:14:54:64:58:ae:e1:6e:fd:
cd:c2:c3:40:ef:6a:3b:4f:41:f8:4e:04:3f:77:bd:
0e:3a:0f:36:71:8d:f0:db:0c:4b:68:51:af:89:a9:
86:19:76:cf:91:89:21:8d:da:18:a1:e5:a1:0b:87:
32:bd:ff:ce:78:00:ce:78:13:69:45:68:2a:74:89:
c9:07:b4:0c:81:85:5d:a9:b6:da:cd:71:41:09:0d:
63:68:c6:9c:2d:ea:62:a6:f0:e2:b7:3b:fc:63:83:
89:b5:95:02:19:86:56:7c:56:81:0f:92:8f:b1:72:
75:1a:57:c4:ea:3e:25:1a:04:4a:cc:19:12:15:69:
1d:e2:df:bb:b5:27:3c:9c:22:fb:e3:c5:e3:45:63:
f3:df:c7:71:05:2d:25:ec:40:b5:96:26:e5:43:78:
93:09:4d:29:a3:36:72:01:c1:e0:01:0f:22:29:ce:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:4D:51:87:15:C9:3A:E4:62:FA:FB:E4:1D:6E:C9:CA:FD:92:9E
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:54:8e:2e:63:17:de:3d:23:66:c2:21:74:e3:38:97:fc:
89:b3:51:14:fd:9a:cb:3d:f5:18:09:52:76:7e:28:39:53:51:
c9:a6:51:6b:35:14:c6:d2:77:21:30:f7:a1:46:f6:df:d9:47:
52:24:2a:6d:21:ed:60:b3:8b:2b:7c:09:29:7e:26:e7:8f:26:
8d:59:45:e4:fa:2c:14:2c:9d:f5:ac:1b:1a:ee:a0:77:26:8a:
df:2c:85:75:b9:20:f5:fc:d5:4f:16:0c:15:d2:df:8e:1b:a3:
68:7c:93:d0:3a:3e:ec:ff:12:6b:5b:f4:a2:ce:b1:b2:86:4d:
1c:27:34:5b:c7:fa:db:e5:4a:bd:36:2f:e9:1e:6e:5a:35:37:
d7:18:ac:05:89:c0:c6:9b:73:3c:95:b6:8d:da:ac:87:d0:28:
d1:81:99:96:61:4e:fe:5c:77:94:76:15:a1:4c:f9:f7:d3:7d:
1f:f7:55:e6:e0:a0:e0:0d:1f:6d:1a:92:31:1f:c2:5d:68:69:
6c:2c:cb:48:ed:88:53:65:12:b8:c3:4f:bc:2b:e9:65:67:7b:
8f:95:39:49:83:5d:85:66:48:b4:df:a6:57:15:48:a7:57:66:
e5:d4:77:4d:b1:a5:c5:05:5f:9b:bb:2c:5e:17:5e:e6:77:88:
5c:75:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:11 2025 by rpki-client