Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: gywLO2DK48ZNvIrzsLPJM7I3tYaXxxDnaHDUcEvxNqE=
Subject key identifier: 1C:C0:08:99:46:99:ED:C5:82:7E:F8:C0:91:E9:9A:37:54:77:49:DA
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 0197B7EA32E3DA7A67F93140CC05513C660C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0D25
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: +ct0q1dzTKzNmMoTDUWnEdVNWQf8Ldd68XYd+RDbAcs=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:32:e3:da:7a:67:f9:31:40:cc:05:51:3c:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=1cc008994699edc5827ef8c091e99a37547749da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:d7:54:3c:aa:cd:14:10:ab:e7:ff:6a:7d:
52:e0:85:68:8e:8c:30:d8:51:fa:4a:5e:69:5b:b5:
6f:66:63:0e:22:2d:9b:ab:80:01:54:dc:e1:e2:53:
c5:42:6a:12:fe:da:92:71:93:5b:96:06:c6:56:72:
d5:fa:2e:71:24:4f:cb:49:6e:fa:c8:25:8a:d0:69:
d2:c3:c4:d5:71:21:f7:72:d1:33:47:9a:78:06:88:
b7:9a:76:c0:2f:b8:4c:a2:05:95:e5:42:14:0c:17:
7b:0b:85:c8:86:bc:7d:67:4f:2b:71:e6:ae:97:35:
0b:38:ed:4d:9e:e7:5b:7d:e2:11:ce:ad:00:6b:89:
a7:a9:6c:b4:eb:b0:73:38:d4:23:c1:42:c4:80:c7:
ff:a7:9d:6f:99:80:80:5f:e9:54:52:3a:45:69:f6:
98:70:09:e8:3c:24:52:3c:11:7c:bb:eb:b3:8a:0c:
f1:cd:c1:34:40:9b:46:33:34:e6:d1:cc:2b:1c:05:
b7:f8:4a:72:c6:fa:f2:a9:8e:3c:a4:56:03:ca:ec:
0f:e7:6a:50:b3:ca:e5:2e:f9:20:59:3b:a5:df:ea:
7d:4c:41:41:30:ba:8c:44:7f:eb:e9:61:99:5c:2d:
3a:66:a7:d8:61:a6:86:e1:db:50:de:ac:46:be:79:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C0:08:99:46:99:ED:C5:82:7E:F8:C0:91:E9:9A:37:54:77:49:DA
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a6:77:b7:f0:53:c1:f3:ec:00:9b:d1:5b:73:df:4b:cd:99:
ac:82:22:3a:e6:ac:a2:69:2b:90:0a:f0:38:a0:f1:2e:fd:7d:
26:51:40:e7:a8:ae:ac:50:04:4d:6e:30:55:cb:6a:6e:a6:b2:
02:48:ab:40:7f:ae:4c:89:28:90:56:0e:6c:a1:f5:70:fe:f4:
d1:bf:62:d9:8e:4c:8e:d9:73:56:4a:8f:e4:d9:c9:ea:b4:aa:
95:fc:dc:89:5a:82:48:2c:06:bc:0f:bd:88:c7:c3:96:5d:5a:
bc:f2:6f:fb:60:71:30:62:9b:7f:0a:b8:d6:08:8a:c9:ff:9e:
fe:a1:23:53:71:d3:ee:a3:db:34:e3:32:d9:8d:ec:14:04:0e:
77:04:2d:d6:e8:83:f2:1a:d3:7e:6c:b8:b7:90:44:3d:7a:25:
86:bd:b9:13:bd:ce:82:a2:49:6a:45:88:95:e1:3d:c0:31:a7:
98:1a:b8:74:05:ba:98:31:d7:65:54:b0:b9:1e:44:e1:f9:9d:
1f:08:13:5e:89:2f:19:94:c3:c9:c4:4b:e1:33:94:5a:00:40:
14:a3:fb:7f:af:e7:f8:ae:4b:c5:58:3e:cd:49:99:70:38:28:
47:d9:53:89:c4:f3:eb:b7:93:e9:d4:36:b2:33:ea:8d:f7:3d:
23:40:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:18 2025 by rpki-client