Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: szwMQzaliRUaVsmhKhVckJfUuXybDtKMn3Hj4gHfF9I=
Subject key identifier: E7:5B:AD:58:55:08:13:6A:60:A7:54:CC:8D:64:23:53:F3:98:40:1C
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0197B6A0AF07A1C8A868B275ADB6D5BEDE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:01:13 +0000
Manifest this update: Sat 28 Jun 2025 13:01:13 +0000
Manifest next update: Sun 29 Jun 2025 13:01:13 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: KM/312R8E23ZWLUFP22uWmQgRiBgF33pxXgfy+Z+yuo=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:af:07:a1:c8:a8:68:b2:75:ad:b6:d5:be:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jun 28 13:01:13 2025 GMT
Not After : Jun 29 13:01:13 2025 GMT
Subject: CN=e75bad585508136a60a754cc8d642353f398401c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:10:31:74:77:13:60:00:f0:e5:66:8b:bd:
dd:c8:0d:e0:8c:c5:f0:19:86:0b:e2:f6:64:40:54:
19:3f:13:98:d9:56:ef:4b:39:80:13:e7:f9:bf:d4:
03:5d:af:6b:31:64:b5:a3:15:12:4a:5a:87:52:ff:
bc:cf:90:c0:20:69:bf:cc:2e:5d:c6:1b:e1:b3:a1:
a2:60:be:e8:25:15:21:37:a9:90:e8:06:98:7d:3c:
56:66:0c:c1:fa:f5:6f:26:d8:4f:73:c3:cd:4c:e7:
e4:7b:ad:82:bb:f9:a8:2f:2d:0d:cc:ce:88:0f:20:
ca:fa:78:8d:71:26:ba:8c:8d:dc:83:e5:77:13:68:
2f:76:a5:40:5f:94:95:f2:3d:52:3d:a0:24:cb:89:
6b:76:52:41:d2:df:da:19:dd:4c:6d:df:5e:79:f9:
79:24:2f:6d:a3:82:77:e2:63:01:4b:9b:c7:ab:80:
e2:05:f6:c5:86:0e:ca:a7:c3:2c:98:d2:c4:c0:99:
d2:c6:44:9b:25:0f:68:17:3a:40:03:ad:52:be:f3:
46:bc:6a:d9:b5:46:d8:91:5d:84:f1:3a:8e:fa:f6:
f2:54:ee:69:0f:5e:63:59:73:e0:9b:64:c5:ba:c4:
b4:17:c1:5b:80:e7:53:34:e8:c3:49:df:89:3c:8a:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:AD:58:55:08:13:6A:60:A7:54:CC:8D:64:23:53:F3:98:40:1C
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:2e:e9:e9:46:45:f6:38:ab:b2:c0:0c:d3:36:38:25:e2:
34:dd:69:bb:89:1b:24:34:91:91:6f:62:b4:dc:74:64:88:fc:
72:83:4a:43:a5:b3:5b:76:97:76:e8:55:21:b0:b1:20:9d:14:
2e:56:41:b2:1b:6d:c9:6c:f2:a5:85:fd:6b:fb:35:e4:bd:fa:
ae:cb:85:d0:1c:7e:7f:98:ac:6a:af:70:90:e6:26:92:4b:37:
52:4e:36:f5:49:88:4c:e2:ad:7f:e9:f0:6d:4b:79:f0:73:90:
c5:bf:58:3b:e5:29:42:92:0e:f4:f4:2f:de:84:a2:7a:a6:8e:
0b:10:71:14:b5:fc:79:45:03:85:ba:18:ee:37:12:e4:6f:fc:
aa:e2:4c:f2:93:11:66:d0:7b:25:58:ae:8e:12:9c:e2:c9:66:
ea:dc:61:8d:69:2f:67:e5:79:c0:86:ef:01:6e:2a:fe:13:a2:
89:91:20:cd:e6:5d:56:65:6a:1a:d6:4f:8a:ad:fc:48:80:d9:
98:ae:aa:b2:8a:da:89:51:01:27:6e:fb:fc:d3:f2:04:cc:d1:
92:32:17:74:c2:ea:ab:8f:5e:d5:a7:02:20:b7:a3:c5:33:99:
24:60:0b:96:c0:16:26:72:00:48:80:af:2a:e3:0b:eb:ce:8d:
bc:ca:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:46 2025 by rpki-client