Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: pRcen216t5UN0IntY7z1egzGtAJUD6pIVUvkHUsOBxI=
Subject key identifier: F2:92:3A:00:67:C4:76:62:32:FD:F2:E1:76:78:33:4B:FB:F8:CB:13
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 0197B70F30D57B5791BE01D8BF42E8FAB039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 0506
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: +HVXB2AcpCEHZsfSyFqxNPE5pbi0CFRFweI4CMYBCI8=)
2: fjo3TJF5UJdtWXbH-RXUzzkMGLw.roa (hash: 3e8hosZ9ppBndt6p8XyvpqJUy9gK6SPz4ut0nyjSkJ4=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:30:d5:7b:57:91:be:01:d8:bf:42:e8:fa:b0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=f2923a0067c4766232fdf2e17678334bfbf8cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:99:24:ad:54:d1:fe:82:2d:30:f4:b1:e5:
0c:4e:43:cf:f5:00:dd:00:8e:08:9a:e2:d2:3a:b3:
b6:85:1a:f6:d5:0a:1d:e1:00:46:de:bb:20:57:87:
8c:9f:f0:c6:ad:e4:01:4b:5b:ff:4c:5f:43:be:59:
a8:ba:e9:b8:90:b5:c3:18:de:7e:74:c4:d5:5a:04:
c0:ff:88:c8:1e:ec:8f:a4:9e:36:86:42:da:8f:cc:
53:5d:29:ff:30:38:b8:c1:3a:38:ea:76:44:20:ef:
d6:d3:68:e0:37:80:9f:a5:bf:19:37:04:ce:ff:9a:
5f:a6:3c:6e:90:42:69:26:7e:69:d9:1b:1b:46:4d:
20:9a:24:f7:0d:1d:04:69:b8:3f:68:93:45:8f:e8:
0e:75:52:db:80:90:75:e1:f4:7c:6e:36:af:82:25:
14:c3:5b:af:af:6e:71:84:af:57:01:d8:94:98:5f:
0a:fa:b2:33:8d:d3:56:0c:9c:00:2b:1b:ca:58:5b:
54:63:a4:80:91:54:35:99:54:a9:e6:6c:19:7e:4f:
07:e3:6d:a0:03:9a:9d:af:31:ad:a9:54:c3:e4:98:
6a:17:59:f3:61:0a:96:ee:ce:ad:81:d2:85:d0:78:
f4:08:b0:39:02:f9:dc:e5:7e:f6:be:84:02:24:65:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:3A:00:67:C4:76:62:32:FD:F2:E1:76:78:33:4B:FB:F8:CB:13
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:f7:38:ae:6b:4e:00:d7:d8:46:66:74:f6:92:06:29:82:
bc:a7:bb:dd:99:a6:22:4b:8f:c7:36:dc:14:ba:ea:d7:30:92:
bc:bc:32:34:2c:b9:32:dc:8b:26:7d:44:e3:3b:91:dd:7c:4a:
aa:3a:0a:ee:7a:89:0d:b0:b0:61:88:4f:3c:f4:7d:f5:39:63:
58:c9:41:7a:b5:72:92:7c:c5:5f:cf:bc:1c:a8:5f:5e:05:f2:
ad:bd:e5:47:b3:c9:fa:28:dc:28:ec:90:58:63:77:f2:62:34:
77:36:a2:57:83:3f:4e:c5:63:c6:0a:cf:76:2c:49:9b:d4:81:
ed:ce:e6:62:ba:4b:ad:8c:10:09:0d:30:87:be:97:46:fc:af:
52:ce:27:88:7d:99:94:71:61:dc:c8:84:c0:5e:9a:56:98:81:
93:d2:58:2a:05:de:c5:11:cf:ec:10:8d:59:52:98:4c:c8:ea:
01:f8:7f:10:74:b4:bf:93:39:b1:71:b0:42:e3:bc:71:64:53:
dc:70:86:a9:15:9a:0d:57:aa:66:21:24:f3:9c:14:3b:c6:e9:
43:62:a4:e6:2f:61:69:34:04:e9:8d:fe:04:78:c0:5f:de:bf:
6c:2d:2f:bb:65:34:5f:b7:23:79:39:33:47:bd:13:da:d3:e0:
cb:63:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:16 2025 by rpki-client