Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: O927PeWY9eDtAEdvQNZdvVQIXXhafhgQYOLyohW3DOE=
Subject key identifier: D6:FB:20:91:66:84:14:A5:E5:C5:75:B5:EF:E3:97:D3:14:34:15:D5
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 0197CE3B411F25D70C3F46785A353890F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0CA2
Signing time: Thu 03 Jul 2025 03:01:19 +0000
Manifest this update: Thu 03 Jul 2025 03:01:19 +0000
Manifest next update: Fri 04 Jul 2025 03:01:19 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: +U4+MvWnR///tjrl81ldO13FDqhpGEVC6VCVM0aztHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:41:1f:25:d7:0c:3f:46:78:5a:35:38:90:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jul 3 03:01:19 2025 GMT
Not After : Jul 4 03:01:19 2025 GMT
Subject: CN=d6fb2091668414a5e5c575b5efe397d3143415d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:9c:4b:ab:54:75:20:62:37:b8:17:af:08:
a5:e6:c7:2b:b9:b2:5d:35:eb:e2:e3:38:5d:60:7d:
11:ab:1c:b2:b8:dd:ff:f0:d4:0a:b4:6e:f8:19:2e:
7d:f1:03:9c:60:ca:01:03:85:b1:dd:20:3d:ad:cd:
84:d7:c6:4d:f3:6c:58:ac:0f:3a:55:e3:cf:f0:6d:
48:ac:89:bb:c2:9b:12:e3:03:20:6f:f4:90:0a:df:
55:47:ff:13:a9:bd:01:22:d8:84:91:e3:29:89:98:
ef:a5:75:b2:74:c8:63:44:12:28:6b:5e:0e:a4:6a:
fe:5e:04:f1:86:ff:0f:eb:39:65:28:ba:63:6a:b0:
7a:45:be:a8:91:19:d8:c8:a2:1e:c9:d6:f3:d6:6f:
cd:72:3e:23:73:42:7e:5d:2a:4c:30:ee:65:04:63:
6c:a3:a8:28:50:b3:ed:b4:34:08:ff:78:be:ec:13:
e6:08:90:7b:c7:d9:d8:72:f0:e2:3b:ff:86:b2:15:
62:93:12:b5:69:10:f1:bc:d9:c9:c1:24:5f:da:cf:
5c:29:26:8e:23:4d:67:fb:9a:a9:e9:bb:49:bd:e8:
2a:cf:2a:7f:02:63:10:dc:7c:9e:25:b5:d4:21:b9:
16:4a:ad:74:ab:13:bc:57:c9:9f:b1:6e:d1:4a:75:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:20:91:66:84:14:A5:E5:C5:75:B5:EF:E3:97:D3:14:34:15:D5
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:ae:10:92:82:70:43:cc:ec:54:f0:01:13:fe:34:4e:52:
a6:a8:cf:73:4d:e3:04:73:1f:56:aa:5d:b0:c9:d0:d5:77:bc:
b2:e0:9e:3f:72:b3:9b:10:d1:4f:43:03:1d:2e:2c:68:62:8c:
3d:1c:a2:21:f7:d1:28:28:a6:e1:30:90:19:21:7a:17:3d:13:
2a:4e:b0:88:58:2c:86:23:62:a9:92:be:fb:53:9f:c0:92:9c:
12:28:e8:be:cd:f9:ea:6b:fe:98:86:e7:c2:f3:7e:d6:bb:25:
2c:86:f3:32:8a:d1:f1:fb:1e:65:09:6e:f6:f2:6d:fd:2d:d4:
27:56:fc:d0:3f:4a:0b:3d:27:1e:8b:6b:07:ad:c7:e5:51:9f:
86:2b:f9:1f:52:8d:77:f3:99:ec:79:07:70:6c:19:8e:e1:9f:
0e:49:e9:17:3b:83:fe:0b:e4:27:4a:7e:8e:2f:c2:94:1d:11:
0e:a9:88:79:57:59:37:0f:0f:29:6c:dc:d6:61:ee:60:95:68:
37:a8:96:6a:71:d4:5e:a3:bd:a2:3b:59:70:4d:c6:a8:af:23:
49:53:bc:10:b9:31:ad:b4:10:da:82:cb:b2:1f:a7:10:92:07:
b1:cb:fe:ed:dc:0c:11:ac:6a:88:00:a9:ca:24:0e:36:2b:ab:
ac:9e:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:49:04 2025 by rpki-client