Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: eBst8BgUBM5wrsyn/7iiYiwGxNGDCBie4SaLRemLfVI=
Subject key identifier: 9D:E9:2D:90:6D:96:3A:01:37:82:C8:7F:85:45:22:95:13:9E:E9:7E
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0197B632B7737FDA34F50FC34F26F7618AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 09AD
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: iC16NA7rrJqBXbrsbENZOQ3Fo/vQyGdIXoHojqILWwM=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b7:73:7f:da:34:f5:0f:c3:4f:26:f7:61:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=9de92d906d963a013782c87f85452295139ee97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:60:3e:1b:0f:fa:da:4b:8e:b5:c6:c1:e7:
1d:b8:79:b8:6d:c7:07:de:74:a3:13:90:19:62:19:
7b:18:34:c3:83:1a:c8:ce:37:83:9e:57:5e:52:01:
7e:e4:41:37:1d:19:59:36:23:d3:30:4d:01:f0:c2:
ac:3a:12:33:08:fa:37:1d:63:ee:83:f1:d1:00:37:
d7:76:03:95:f5:81:7a:65:3d:18:9f:03:a9:32:7e:
88:f4:a0:e9:88:a5:19:7a:b0:a8:98:4a:08:d8:4b:
bf:a9:a4:26:b3:d5:79:c3:2c:4f:bb:64:20:20:71:
21:e8:48:1c:e0:fb:72:1b:93:a3:e3:74:b6:03:77:
f1:ce:16:ce:38:3f:e4:30:db:12:eb:a4:79:5a:e7:
f0:3e:32:f7:09:92:8b:13:b8:b3:35:6c:c0:bd:a7:
85:e9:4d:e1:80:ce:ed:1d:cc:cb:e2:78:0d:75:4e:
32:7d:68:04:4c:ef:65:4e:21:d9:48:18:a9:74:02:
e2:6b:45:2f:9c:7b:6d:ac:82:b2:1c:16:3c:28:55:
48:64:74:3f:c0:7d:7d:f2:4a:62:43:00:6a:a4:f8:
bf:56:7d:df:6d:f8:bc:55:1d:7c:a2:c8:b5:15:db:
af:b9:84:8c:9a:26:90:3d:4b:82:d8:2e:78:fb:91:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:2D:90:6D:96:3A:01:37:82:C8:7F:85:45:22:95:13:9E:E9:7E
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bf:12:b6:00:de:69:a9:9b:a1:c2:7a:80:e2:70:08:de:5f:
1d:7f:ec:63:d8:97:63:fa:8d:05:be:27:fd:dc:23:33:98:38:
18:bd:3c:d1:52:d8:ed:05:cb:f4:1a:41:26:8b:c9:8a:90:44:
ea:93:0f:33:c7:78:a7:84:d8:26:64:f1:bb:0e:dc:5a:44:72:
0f:3e:b9:c3:b5:e0:36:db:02:1b:93:26:72:ad:20:01:60:d2:
9d:d5:a6:85:83:f2:f7:f9:7c:91:78:52:41:66:93:85:3f:88:
c2:05:84:68:2f:57:a9:ef:eb:46:7b:b4:31:03:0b:ac:a7:ce:
91:62:92:4f:5d:5e:47:90:37:5b:08:b9:4a:44:8f:3c:bf:26:
f6:80:2a:3f:de:2c:b6:70:31:fb:41:a9:0f:52:55:90:97:a2:
78:bc:95:2e:e2:cb:01:85:79:75:e4:86:65:30:8e:65:fb:05:
3c:ad:4b:66:00:0e:75:69:96:a1:84:9f:cc:1f:2e:f8:4f:dc:
bd:31:bf:84:b0:d8:29:09:f4:fe:b7:1d:b3:e5:c1:ac:cb:0a:
84:10:6f:a5:96:87:a2:3f:ac:c2:f9:17:fa:b2:19:dd:7b:65:
42:d1:81:ef:1c:ef:96:e4:e3:9c:d7:df:1b:2c:9d:d0:41:47:
2a:82:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:31 2025 by rpki-client