Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: uuy6CAb8PZ+TaSdAqKxS7KvJYYb9MlKUwbqzlTbMs+g=
Subject key identifier: E4:3C:03:37:07:63:CB:0F:AC:19:64:14:73:77:F2:DA:D4:0D:9E:0E
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 0197B745A27F6575F6E9EE825F42FA4354E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 04A3
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: L1QwQUqeVNmFC11sYqRz66jsyBdrFd1M1Nor5Xb1PgA=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a2:7f:65:75:f6:e9:ee:82:5f:42:fa:43:54:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=e43c03370763cb0fac1964147377f2dad40d9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:43:ed:6b:af:38:7e:ed:26:ea:0d:37:a4:
16:39:7b:f7:3e:f0:26:aa:a0:ce:09:c2:2c:81:c1:
5d:da:9e:80:48:a1:e4:ed:e4:6f:5b:29:29:20:f6:
10:05:8f:aa:cd:8d:61:bd:ee:93:ec:50:d8:5c:d8:
df:25:48:71:19:5f:b1:5c:f7:63:66:1d:1d:b0:e1:
70:09:be:af:a0:13:fe:5a:64:c4:1a:67:8a:63:4e:
29:4d:3b:2e:d1:69:84:72:6d:81:34:e1:0d:1c:12:
6d:2d:8f:9f:0a:07:2a:ae:73:84:b1:14:d5:6f:e1:
af:80:f6:da:46:29:d2:6c:35:a6:60:89:96:06:0d:
11:e9:80:48:73:07:c8:10:35:d2:67:fa:2b:b3:dd:
92:6c:f7:31:d0:4d:3a:a0:ff:e2:0f:a1:c6:33:7d:
df:87:19:2f:42:5a:21:a0:04:88:9a:b4:a0:83:d5:
28:4e:0f:1c:34:e8:b7:a6:0d:72:e6:c7:d0:a9:9e:
89:c6:5f:36:83:d0:ff:4c:8d:41:b4:8f:71:9f:d4:
74:e6:c8:10:17:e8:63:66:f9:ec:83:55:8a:cd:33:
64:ce:23:bc:4b:5d:20:03:04:dc:37:8c:f6:41:25:
e7:08:47:fa:bd:1b:6a:f2:44:d5:3c:0a:af:4d:b6:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:03:37:07:63:CB:0F:AC:19:64:14:73:77:F2:DA:D4:0D:9E:0E
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:90:aa:a2:03:9e:6d:eb:8f:83:d6:3f:6f:be:b2:97:fe:cb:
60:81:18:07:e4:96:1f:bd:d7:99:ba:83:8d:f0:18:f2:77:78:
d6:1b:64:f6:31:13:dc:71:6d:ce:3c:64:8b:84:65:4a:f1:ef:
df:ea:82:de:5b:f0:f3:37:8b:4c:67:ec:35:b5:43:86:fd:32:
ab:9a:e8:18:7e:cf:8f:f4:0f:82:03:ae:bd:19:40:d4:40:25:
0c:96:aa:a8:69:9f:d0:66:98:12:4e:a8:31:55:a1:32:c4:bb:
4d:82:a6:31:78:31:be:cf:40:bc:3e:2e:34:7a:83:9d:38:0f:
fb:4d:fb:ae:79:01:fe:89:22:13:96:93:51:0c:cb:16:9f:29:
0c:b0:c2:91:f9:94:46:6b:6a:b4:7e:cb:f5:3c:b5:9b:7a:78:
d1:dd:85:24:f8:0f:e0:84:97:8d:9c:be:b3:fa:85:95:c4:97:
8d:70:bc:85:9f:f7:9b:9a:2d:5c:a0:1d:7d:c6:84:5f:f5:5b:
f9:40:67:16:bd:8f:d6:f3:6b:3a:61:e5:23:bb:31:35:5d:04:
ad:28:bc:c7:29:73:a5:ed:f7:c7:82:f9:ab:3d:34:4c:bc:6d:
82:b6:65:54:27:a0:3f:a3:d2:eb:1c:91:c1:27:a8:87:ef:97:
e1:6d:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:12 2025 by rpki-client