Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier: TtQof0wGt/5cD4BK+UClS6tXz4JPuo9SzM3P18FSRno=
Subject key identifier: E6:DB:16:E5:2A:CA:5A:53:17:2C:C3:F6:C8:33:50:11:8A:0B:D5:C7
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial: 0197B70E612D6B1FBAB4A004E775B567F759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number: 0AAD
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: VF/KLBLzprw1WUYXXjAOs8lUD1DsJPO0Y1OnRah30Dg=)
2: YSH0QfgktL4T3PqTj2iClyuBZuc.roa (hash: otGtnOmBuu+IdPmE0dcRqAI5P+FLdodcVi6Fo/18JQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:61:2d:6b:1f:ba:b4:a0:04:e7:75:b5:67:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=e6db16e52aca5a53172cc3f6c83350118a0bd5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:a9:bc:de:92:c0:9b:6a:36:a5:f0:a8:8e:
54:ca:ae:f5:0b:d1:7f:63:6b:3f:9f:9a:44:06:2b:
c8:7b:62:85:48:17:d5:93:c9:38:38:f8:fd:1d:f2:
d2:83:01:9b:96:13:58:90:77:27:05:6f:43:ff:83:
69:c0:12:db:9c:c7:7d:b6:0e:15:ad:eb:21:70:ba:
5f:47:8a:3e:60:c9:30:2c:b3:34:10:6e:c5:ff:af:
4f:50:47:fc:2f:02:32:bb:af:f5:8d:06:49:62:3c:
29:ea:9f:5c:b9:e8:2f:5f:21:07:3c:4c:46:f9:09:
3c:7f:d8:14:16:6c:a0:75:dd:ec:8a:da:1c:13:85:
3e:52:f7:4b:86:39:31:c6:35:20:c0:4e:11:d5:07:
94:df:35:0c:0b:59:a9:ef:22:e3:e2:9c:11:c5:ba:
c4:70:48:2a:5d:55:cc:ca:3e:19:8c:bf:29:d0:e1:
1c:e5:97:f1:63:51:e9:09:90:0d:bb:70:03:61:70:
24:73:35:01:2f:fd:43:ae:de:13:d5:f5:1f:92:cc:
0a:2c:3b:52:44:fd:bf:c7:ba:bb:11:d4:75:e6:57:
31:e7:85:59:cf:87:2c:48:37:80:03:c6:45:9e:48:
8c:d3:a7:42:4a:5b:05:99:94:25:d3:75:cd:3f:68:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:16:E5:2A:CA:5A:53:17:2C:C3:F6:C8:33:50:11:8A:0B:D5:C7
X509v3 Authority Key Identifier:
keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:97:69:de:c6:7b:36:b9:1b:9d:db:90:42:1d:d4:cd:06:
32:ed:ab:dd:85:88:a2:25:b8:2d:99:0b:74:12:63:ed:0d:cd:
81:fb:79:6a:2e:f5:ed:d2:f2:52:a5:29:0e:9f:9a:32:17:c2:
2a:9c:a3:61:b7:a0:3a:a1:77:38:7b:5f:1f:17:8c:e3:ad:15:
10:9f:78:6c:41:ad:88:d5:8f:37:25:fb:ad:cd:d7:33:0f:6b:
ac:7c:e1:07:5f:d4:ca:bc:6e:3b:c0:ba:12:27:89:b4:47:e0:
01:81:dc:1d:a2:f3:98:5e:53:ff:e9:42:94:6c:2d:b9:1a:d4:
62:31:c9:27:d1:48:50:f0:40:a6:cb:03:1e:1c:c2:a7:88:bf:
9f:ba:a4:f7:fc:ae:a6:07:a6:d1:25:20:5e:a8:3a:c9:6b:a7:
b3:f8:04:21:71:b7:30:1a:67:86:27:1b:cb:e1:77:f0:02:4f:
3c:82:d5:2a:08:0a:3b:0c:54:a7:2d:cd:81:0f:be:97:9a:0b:
da:f9:d5:67:87:3a:32:84:2d:b7:dc:ee:3f:21:7e:99:06:07:
26:22:71:af:34:fa:d2:4b:38:5d:e1:b1:f6:26:28:3f:43:c8:
f5:c0:fd:bb:ae:c2:47:73:88:16:da:1a:bf:18:6d:e5:38:37:
37:a2:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:31 2025 by rpki-client