Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: +dXxmAcYuAaNBev+Bb0JIbn6PzmGHoCd8SVPXfDY+Yg=
Subject key identifier: 3E:9B:1E:CF:5F:F1:B9:A5:D7:53:AB:90:03:B1:3B:BD:87:CA:3F:09
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0197DC2D8E671DC979AD6AE098490B8FAD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1054
Signing time: Sat 05 Jul 2025 20:01:02 +0000
Manifest this update: Sat 05 Jul 2025 20:01:02 +0000
Manifest next update: Sun 06 Jul 2025 20:01:02 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: /f3r7T1hU/XEuUceeSAVGjNqHB6hjOcuQcXw2cgyPtA=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:2d:8e:67:1d:c9:79:ad:6a:e0:98:49:0b:8f:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jul 5 20:01:02 2025 GMT
Not After : Jul 6 20:01:02 2025 GMT
Subject: CN=3e9b1ecf5ff1b9a5d753ab9003b13bbd87ca3f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:28:53:21:99:d2:98:89:12:aa:40:83:58:
9c:3d:01:26:17:88:3b:d7:da:69:1a:2e:03:26:b1:
95:4e:05:bb:ba:f1:f4:17:6e:18:c1:25:9c:ec:7d:
87:41:a3:72:4f:c8:d5:e3:5e:73:ac:f9:ff:16:54:
1f:8d:12:5d:3a:77:eb:f5:b6:72:12:ce:ce:b9:20:
b0:24:c3:b4:fc:cd:2f:92:fc:f5:ea:80:36:25:4c:
0e:37:d5:aa:9e:54:6a:29:99:e9:00:95:31:1b:cc:
8b:36:97:67:85:d2:98:ed:c4:e7:ad:a7:1e:2d:d1:
06:64:8e:22:52:10:00:66:6c:6d:94:85:89:45:cb:
50:de:c9:91:30:9d:ae:04:96:49:17:1a:db:0f:46:
25:89:54:77:e7:51:89:9b:af:14:4b:39:0b:5d:f9:
5e:4c:84:30:06:ba:f5:65:a3:54:4a:a3:14:f1:b2:
3c:b5:aa:04:0f:94:f1:79:b9:a4:3a:c6:e4:6a:2e:
64:6c:8f:63:62:04:cf:6e:6d:06:de:64:dd:4d:b0:
c9:59:e2:95:c2:cf:a0:d4:e7:fb:23:9b:a8:0a:70:
13:09:23:7a:50:2c:6f:1d:4d:64:2b:26:bf:f7:a0:
42:7f:48:ff:dd:d0:54:72:39:d3:9a:6d:c0:0b:df:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:1E:CF:5F:F1:B9:A5:D7:53:AB:90:03:B1:3B:BD:87:CA:3F:09
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:54:b6:53:d8:e3:8b:83:68:e1:5d:6f:3e:cf:58:7a:f5:c3:
d5:9e:d2:f4:a9:d7:94:57:51:61:ff:24:9a:54:70:b6:b6:f3:
da:6c:c2:3e:60:13:0d:a0:a8:d8:1a:30:fb:d6:e5:e0:98:ac:
bd:19:d9:8e:ae:23:e2:54:68:fa:f6:b9:53:9d:47:eb:b4:fa:
68:c5:c2:8d:6c:98:d8:f4:b7:e1:68:02:f3:a2:42:b7:a9:bb:
74:b3:73:f9:15:84:50:0d:bc:3d:1a:57:54:f0:46:92:70:49:
78:47:15:1e:43:a5:96:84:a3:4c:4c:9b:2c:b2:d9:81:f4:b8:
f0:b8:ca:0a:ab:59:9a:1e:1d:b4:ab:ca:a2:d9:d4:ad:99:8f:
5a:2c:40:82:70:32:c7:9f:35:40:b5:d8:11:0c:df:2f:29:43:
e0:50:7f:06:49:0b:3a:0a:b7:e4:c4:f1:c9:f9:90:e5:9b:12:
75:4d:ef:1c:41:a5:2c:e5:e0:72:12:b5:5e:d8:96:ae:45:f7:
e7:0c:90:64:91:47:89:d4:48:14:02:94:c7:6a:81:ef:8f:aa:
33:2d:08:08:4b:87:10:cc:1e:2b:ba:e7:35:09:de:f1:b2:2a:
c4:ef:9a:1e:22:c1:32:ad:99:bc:44:e6:2a:a9:cf:c0:cf:d0:
fe:17:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:17:08 2025 by rpki-client