Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: J2XEbB5y3rFCsR39IndL1swRRgGtCb8Cxz318KvbOY0=
Subject key identifier: D5:FB:02:4B:89:4C:4D:32:B9:17:F1:F1:28:71:70:BB:4A:2C:8B:76
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 0197B6A0EC2ED17F77670E4758F0CB9F4435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 0313
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: jWz+FEi0Muj7UN5Hq4/Jf8jlciHdAOHe2BLz6MXf5LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ec:2e:d1:7f:77:67:0e:47:58:f0:cb:9f:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=d5fb024b894c4d32b917f1f1287170bb4a2c8b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:71:8a:d8:1d:97:5a:b1:27:b6:00:e3:f5:
3c:ea:05:cc:2a:b9:5d:ba:57:2e:5a:5f:2e:f7:d5:
0e:42:2c:4c:d9:1a:56:1f:b4:14:1f:b6:45:51:85:
31:38:cf:99:3c:57:c9:20:15:95:49:b8:b8:a6:64:
01:9e:ae:43:fc:a6:3a:30:cf:91:85:91:e0:91:85:
2e:8b:61:32:20:91:85:59:71:26:c2:95:c1:cb:bf:
5f:ae:48:0d:7d:1a:a8:c0:bd:5c:21:5d:4d:da:b0:
55:c4:b1:42:da:cd:54:0e:8d:55:ab:a0:10:8c:96:
f6:30:d8:9a:16:85:94:3d:ed:c4:23:5d:40:59:a8:
dc:48:77:7e:6e:79:03:7e:60:20:ea:bb:59:ca:d9:
48:eb:5b:aa:ac:d6:3e:79:58:96:ed:02:6f:ff:9c:
23:56:db:f7:70:ff:8d:29:be:bb:b3:ce:5f:4b:8e:
82:61:ac:20:c8:62:d8:79:f5:c1:e6:3e:a5:92:de:
96:00:e8:80:77:66:7e:e3:4a:94:0e:c1:45:5c:dd:
4b:ae:81:8e:c4:d0:10:80:6a:a6:78:95:b5:19:65:
29:d8:83:3f:fe:3d:90:0c:53:9a:08:63:f6:15:05:
5e:50:0a:71:17:8f:53:14:bc:3d:16:4d:8d:16:80:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FB:02:4B:89:4C:4D:32:B9:17:F1:F1:28:71:70:BB:4A:2C:8B:76
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:79:27:01:b0:ca:c5:0f:35:a7:8c:94:44:4c:dd:ff:e4:c5:
76:03:a1:14:4f:9c:e5:e2:b2:e0:1b:5d:80:ce:d4:43:8b:68:
68:f9:66:9c:4e:2c:75:f1:06:e6:fa:82:a0:c4:7a:83:42:23:
1a:6f:4d:32:bb:b7:b5:ba:56:ad:23:c7:8a:1b:f0:c6:51:34:
a9:ca:a9:c4:37:b0:5f:fb:79:d6:5a:3d:db:8d:99:0c:0d:23:
64:f3:09:4a:14:50:e4:da:8e:d7:81:3e:5c:ac:43:ba:84:3c:
ec:6a:b6:3f:11:a6:e4:1e:5a:8a:43:df:a4:9d:59:e6:5c:30:
8f:c1:6d:00:6f:ce:74:64:d5:81:56:9a:ec:42:7d:f4:e6:4e:
64:ce:ce:c2:a6:c6:ce:f2:7f:be:a5:2d:8a:84:bc:06:65:8b:
ee:a1:c0:78:02:c6:de:57:f9:1f:0a:9c:54:1a:e4:fc:b9:ba:
50:ab:64:fd:15:a0:80:7f:c7:2f:fe:29:4d:f0:a2:18:94:72:
b6:87:6b:c7:1d:dc:ad:16:5f:29:b6:62:78:4f:1e:27:4a:64:
fb:d4:a4:ec:46:72:c5:44:29:4d:ff:3f:0c:7c:e1:4e:46:93:
77:41:57:70:09:70:54:45:af:be:6a:58:77:d2:b0:b5:28:69:
a5:98:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:17 2025 by rpki-client