Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: JUjcXCcTUYDGOYP57hnD4ZYmTswgE2HWlGps/BX6p0M=
Subject key identifier: 96:9B:23:AB:F3:2B:5B:D7:3A:F4:37:32:33:3F:C4:DA:DC:E4:8B:2F
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 0197B6A16F9E5009795586DFE02251661E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: 1+Z4Z6XfBhdbR15L4iyEonHGYm2Ci/SLei0nmA3NteM=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6f:9e:50:09:79:55:86:df:e0:22:51:66:1e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=969b23abf32b5bd73af43732333fc4dadce48b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:e9:a8:d3:59:a7:3a:29:0c:ab:41:ec:93:
48:4e:69:46:a1:c4:b0:87:df:05:9d:77:ca:90:bf:
6f:19:13:5a:0e:35:0e:72:0a:b7:19:09:bc:09:6b:
c6:99:df:e2:7c:d1:74:e3:27:52:3f:9b:f6:13:73:
b2:29:03:84:a2:01:80:b6:3d:74:e7:92:9e:00:d5:
7c:3d:27:ed:cb:95:37:aa:1a:a9:5c:de:c5:6f:db:
c9:c0:60:33:19:ea:85:94:28:48:ba:cd:8a:ca:8b:
e0:09:4d:88:40:0c:a1:fc:f2:f2:23:18:f4:00:7f:
d0:77:e5:09:39:e1:ef:6d:fd:7f:36:b8:64:25:8b:
8e:c9:8c:88:3b:3c:bf:c8:f5:c5:93:04:10:ca:51:
76:76:70:d9:fd:76:78:cc:07:da:1c:f5:c7:08:c7:
a7:1d:9a:ff:00:71:94:ac:96:b0:33:94:16:f1:35:
2f:9b:a0:d7:60:d8:05:f8:f5:3f:a9:46:6b:4f:22:
80:24:c6:70:8e:9c:f3:53:28:59:3c:f5:cd:9f:a7:
64:ad:f6:cf:e0:47:28:36:20:b2:df:8b:c3:92:9d:
e3:d5:66:34:a1:07:3c:1e:09:91:f7:48:65:76:4f:
e2:0c:f7:8d:89:c0:82:6d:e4:13:a2:26:b5:33:d2:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:23:AB:F3:2B:5B:D7:3A:F4:37:32:33:3F:C4:DA:DC:E4:8B:2F
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:63:bd:ae:0f:ad:3c:8a:d0:01:12:ba:84:31:96:a3:8f:
46:4e:eb:34:37:9d:51:80:5e:93:1c:3d:35:bd:29:2a:b8:3a:
9a:62:fe:18:09:1b:e6:d6:0c:b0:c7:57:72:bf:c7:d2:36:ba:
07:cd:e7:10:55:99:58:95:dd:58:e4:5d:de:d7:f4:55:73:fa:
e7:35:e2:7b:33:d2:a3:4f:a0:17:0e:89:8f:0a:6b:33:c2:22:
d5:f9:fc:85:4c:9a:2c:ad:c3:37:c7:ab:c1:51:66:54:73:e9:
8b:93:34:62:83:be:d5:e2:9d:2d:49:67:3a:3b:da:3d:1c:af:
4f:a2:8a:35:ea:03:7b:c0:8e:39:01:6f:d4:47:36:ca:e0:3b:
b8:cc:8d:60:b9:4f:2d:2c:75:28:67:cc:8f:fe:0d:25:74:f8:
be:07:a6:a2:12:8c:cf:b8:d0:48:0e:2e:df:bf:f9:11:f8:89:
c6:a7:62:a9:90:84:75:9a:73:8c:7d:ff:2b:cc:5f:6f:0e:25:
ef:5f:27:17:84:cf:d3:c1:11:e2:b0:60:b7:4c:78:cc:9c:ea:
b0:b7:ee:50:1c:7f:57:b0:38:75:12:66:40:a8:3a:b3:2c:18:
4b:76:50:cf:14:46:a5:9b:1d:1d:6c:10:c8:23:00:4d:b2:ed:
ba:fc:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:56 2025 by rpki-client