Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: +paWzVoLE+S9F8yEITRkaoE0sIsfy2j2+rth1uVut/I=
Subject key identifier: 5D:6D:76:FC:38:61:C7:C8:7C:CD:5A:D7:75:67:07:1C:04:B7:E7:50
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 0197B82135CABF5A7808219E9E421C4BBCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: rCxqJ+eG7Vrqx/IdJa2y1IY6AMcAuwewUzxJI0VTcHA=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:35:ca:bf:5a:78:08:21:9e:9e:42:1c:4b:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=5d6d76fc3861c7c87ccd5ad77567071c04b7e750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:39:d6:55:70:c2:e1:ea:c6:70:64:32:22:
13:13:dd:c7:3e:c4:bc:57:3b:a4:dc:62:0f:e1:ce:
d7:26:35:8b:f6:16:7c:ca:70:fc:b9:68:5c:3a:45:
f1:ec:c0:a1:d4:93:be:d8:eb:ba:02:0c:76:9c:e4:
d8:d3:48:11:61:49:05:3c:b5:96:c8:60:d3:98:14:
c6:2d:69:92:35:32:a4:7a:e1:ea:51:14:9a:28:8a:
46:2a:7d:92:da:01:1e:41:2f:58:ef:48:a0:b2:78:
2e:e5:de:95:23:b7:ff:18:d1:62:25:0f:ef:97:6f:
16:a1:f7:87:41:8f:6f:2c:a6:8a:d6:89:89:16:40:
80:b3:88:18:6b:06:3e:14:a4:eb:4b:57:b3:0a:67:
70:f9:37:80:6d:97:8d:21:b7:67:6c:b6:fd:cb:4b:
0c:ea:54:aa:72:83:28:91:bd:04:5f:14:4e:ab:ea:
4f:1f:33:1d:27:bb:16:2b:90:d5:af:e5:36:f8:6b:
d4:6f:b3:18:d6:b0:83:70:c8:b5:93:35:0b:0d:8e:
66:d2:2a:a5:1a:d3:ff:b5:aa:39:1d:9a:66:0b:58:
72:71:59:ce:97:db:1b:79:69:8e:c4:9a:64:16:4b:
86:e8:fb:82:bd:58:75:21:c3:b3:80:7b:c3:eb:87:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:76:FC:38:61:C7:C8:7C:CD:5A:D7:75:67:07:1C:04:B7:E7:50
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:58:89:b5:8b:b7:7d:63:93:99:cf:5e:ef:1d:1c:35:12:
2c:ad:d6:07:19:67:28:57:91:d6:d9:13:ba:7c:3a:df:a9:cf:
b9:27:fd:f9:2e:1a:34:d1:6b:1d:7d:74:56:4f:02:6b:97:aa:
3f:6f:cc:67:86:53:b7:33:3f:3c:4b:f4:59:ee:e6:ab:53:5f:
8e:59:21:d0:9b:8e:2a:23:54:c5:1d:93:20:4b:a5:0c:56:e2:
f0:df:f0:d3:3a:35:a4:14:db:cc:4d:d6:37:b9:33:11:ee:26:
0d:89:00:16:43:f3:29:de:dc:e2:d5:52:c8:0b:f5:3d:b9:5e:
e7:09:f2:4c:40:44:15:94:f8:64:4c:86:8b:c6:50:d2:49:ea:
63:ca:b6:c2:72:f1:01:87:3b:7b:79:45:f8:3f:33:c0:4f:b5:
9a:1e:54:b4:93:82:58:b4:a4:ed:13:ca:75:06:25:02:90:42:
89:50:b0:96:a1:4d:13:6f:c4:8b:b3:94:3b:81:03:0f:8a:6b:
c4:7f:5c:74:e4:cb:6b:a9:47:c7:58:e6:6f:f4:65:f9:f0:68:
25:8a:bb:9e:70:91:a9:64:3a:74:47:4a:a0:e9:44:ee:b3:50:
b0:96:cb:a5:29:9d:c5:04:0d:47:07:12:6b:b1:fc:42:06:b3:
18:d3:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client