Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: dal1W8PTlQ+WPi3Eo08WhV1pLWhoemHuvd8VukzbNjw=
Subject key identifier: C1:06:6B:D7:7C:67:75:BE:AE:26:40:3C:08:D0:2C:F3:75:4E:C7:80
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0197B70F4BA66D87E33220DB12F169DC4CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 0720
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: ysvR+3EwUzpjicO+4gOQ0xd3JDW27aMc+YwbszkE96s=)
2: Kq5xAZANKOfKwGgabwcEpDAlttw.roa (hash: gZrCab7OfKcDgXrji1r5JrFbiZW+bpKbWNRFXqaDbXg=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4b:a6:6d:87:e3:32:20:db:12:f1:69:dc:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=c1066bd77c6775beae26403c08d02cf3754ec780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:62:0f:fd:9d:a9:dc:b9:76:e0:fc:83:4c:
c0:32:9c:b3:f8:35:fb:6c:12:1b:a1:fc:32:38:38:
49:6c:48:d7:3e:43:20:10:60:5e:df:a2:66:15:54:
a2:03:6b:66:ff:f2:5f:71:a7:6d:f2:e9:13:05:de:
90:18:3e:75:37:78:15:1e:18:c0:54:6b:a9:82:38:
69:cb:5e:ef:c7:ed:71:df:47:e9:af:9f:f8:27:05:
16:75:94:e1:37:21:3f:9e:1d:dd:46:81:a4:6b:f3:
5e:b9:ad:c6:24:9b:74:ea:f0:87:c7:4f:b3:0b:83:
e1:ef:18:94:2a:07:57:62:57:8f:41:0b:d2:a0:92:
4e:5d:a5:16:6a:5a:92:0b:6d:44:30:63:24:8d:a5:
94:26:f6:5d:0c:96:0e:d1:99:ec:31:5a:57:c6:8c:
b2:4f:c3:f1:34:9c:6b:5c:2a:69:14:12:55:d2:89:
98:1a:ca:f8:fd:4d:f0:a6:d8:5b:27:4b:a4:7a:6e:
99:f1:28:ed:5f:9c:78:e3:df:c1:a7:0a:a5:b5:76:
ff:fd:34:3a:59:73:a9:65:23:23:7f:66:26:64:c9:
42:d2:0d:c7:81:15:6d:74:14:53:43:97:5b:1f:c9:
b1:22:01:a0:37:0e:3a:90:b4:77:7f:23:47:fa:44:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:6B:D7:7C:67:75:BE:AE:26:40:3C:08:D0:2C:F3:75:4E:C7:80
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2e:fe:d7:c0:a9:18:ef:91:0b:80:fe:1e:f8:3b:99:19:b4:
90:ae:29:0a:12:cc:ab:05:0d:9d:c4:7a:5e:f0:8c:d1:2a:7b:
db:dd:16:68:95:84:9c:d9:cb:45:f9:49:92:20:6a:e6:ae:7c:
30:de:33:a0:ec:2b:93:6d:03:4e:6b:5b:7d:63:fb:ff:a8:83:
b8:95:46:8c:52:1b:30:01:bf:2a:2f:80:bf:bb:dc:1b:81:16:
fc:18:c2:50:2f:9a:bf:8a:8e:e6:1b:95:12:1a:fe:e3:3d:af:
51:c4:49:2a:d7:24:43:92:bc:a7:94:79:19:2a:f3:27:b6:96:
b6:37:85:8f:22:7e:1e:15:34:a4:e5:c0:79:ea:91:83:72:81:
a3:25:4d:b2:ab:47:3b:c8:cb:9c:02:6c:dd:ea:98:d1:4a:d6:
c2:ec:7d:b8:40:35:52:46:ea:8a:20:06:f2:78:a6:b6:6a:a7:
02:03:e7:01:ca:bd:1f:d8:29:37:62:f5:85:cf:b6:2b:b7:9b:
8b:e5:b3:e6:3e:a3:f8:39:b5:0b:4a:91:49:14:d8:e0:cc:f1:
d5:b7:f4:3d:2d:7f:bf:b9:3e:d6:eb:40:dd:ec:82:fb:06:9f:
2b:70:b9:ef:0d:17:f6:ff:fe:ee:13:cf:d8:af:eb:84:0f:ae:
56:11:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:58 2025 by rpki-client