Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: 2hIFjXWyJmDuQ+3XefPkPo8n0vXgIHrfT/ThzAUeIVM=
Subject key identifier: A1:51:87:93:E5:AE:9A:E1:DE:34:BC:76:EB:0F:8A:FF:28:38:F6:A5
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 0197B7455DF712305C28C1FA19F27C293B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1336
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: P7Fa23AeuUjeCHLllnG91kU3EYaUZpVKhhJZPEQYUbQ=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5d:f7:12:30:5c:28:c1:fa:19:f2:7c:29:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=a1518793e5ae9ae1de34bc76eb0f8aff2838f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:a9:3f:cf:81:b6:b8:a3:ac:47:12:f9:2b:
fe:87:67:81:6a:c6:01:af:77:ac:74:8d:74:e1:ae:
3a:03:b1:55:56:e6:aa:69:36:32:52:98:1f:10:8e:
85:ea:94:44:cb:2d:00:dc:20:fb:a1:68:c9:69:5e:
17:90:25:c3:c4:72:35:c1:58:89:53:eb:87:5e:b8:
c0:e2:a3:24:64:ab:b4:80:6e:47:0a:79:b9:bd:90:
cc:88:bc:6f:b3:c3:1b:d7:c1:21:c4:95:dc:a9:4c:
c1:99:51:9c:34:97:b2:74:a1:5d:2f:b3:a6:ce:da:
eb:de:db:45:27:54:8e:a0:6a:5e:7a:62:f0:4e:d8:
7c:97:ec:65:e2:4b:33:1f:ed:70:c0:fb:e6:a7:12:
1e:1e:50:c8:b0:3a:e2:71:61:41:cf:e8:e6:10:bf:
c5:2f:c3:4e:b1:d2:c5:1f:c2:57:1d:65:9f:90:98:
e5:c4:03:3c:9f:24:26:ad:d5:0b:e7:95:a8:3d:05:
a9:4e:92:a0:91:9d:e4:0e:a5:1a:e3:72:cf:79:ae:
c9:b0:e6:ab:50:f4:36:55:df:d2:f4:03:53:42:d5:
f7:d9:b8:02:8d:b8:93:51:83:6e:a5:68:20:11:7a:
7f:9c:46:2c:fb:7e:b2:a2:05:bc:55:1d:ec:9a:a5:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:87:93:E5:AE:9A:E1:DE:34:BC:76:EB:0F:8A:FF:28:38:F6:A5
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:ed:58:d0:0e:40:ec:6c:5e:fb:ea:0f:db:84:78:f9:50:
82:f5:34:72:cb:a2:4c:24:d4:20:ab:48:14:c6:f1:a9:5e:26:
8b:6e:e2:ef:66:3c:ba:65:e1:0f:f4:11:a4:89:4a:4e:75:88:
91:d8:68:47:f8:e9:a4:52:81:6f:26:69:07:8e:9c:9f:03:65:
dc:14:6e:f0:75:ab:fa:dc:59:a1:25:05:d2:5b:ea:9a:c6:24:
36:93:a3:cf:85:74:eb:14:50:3c:5f:c0:b5:25:44:7d:1f:b3:
9f:29:7e:94:3d:f4:74:df:1e:2e:12:b3:58:bc:54:ea:c0:12:
42:43:ef:c7:79:0b:56:56:02:56:4e:11:3e:c1:fa:13:ca:89:
ef:b4:31:84:4d:90:af:3b:56:b1:b4:d9:fb:4e:25:0c:aa:62:
1f:f0:7c:67:78:2c:e1:23:01:f5:da:cf:9e:34:3d:ee:5e:1c:
ac:03:0f:23:2f:e3:79:66:01:90:27:2e:9b:5a:aa:a0:2a:49:
29:b0:44:d5:d1:41:62:38:68:f6:93:41:f2:48:6d:e6:01:26:
65:25:4d:27:0c:05:41:67:51:1c:d6:8e:40:1f:79:94:a1:9c:
48:c8:83:f3:ec:e1:e5:cf:07:52:13:f1:00:56:73:03:56:39:
ab:a0:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:05 2025 by rpki-client