Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: OmyrQEhEr5aD2Rn/TaG2G8qxuMRdMKdZEcJBc/qw/9k=
Subject key identifier: B5:01:B1:4B:DB:EE:98:A2:A3:7B:F3:AA:73:84:1D:6B:2D:70:9E:EE
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 0197D7ABD723AB4C847528FC013CBAE5F8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 15C4
Signing time: Fri 04 Jul 2025 23:00:52 +0000
Manifest this update: Fri 04 Jul 2025 23:00:52 +0000
Manifest next update: Sat 05 Jul 2025 23:00:52 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: dqwFnEdut49dU48P5QWYc9teI48kWZuk8FWAv0RpcmQ=)
2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:ab:d7:23:ab:4c:84:75:28:fc:01:3c:ba:e5:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Jul 4 23:00:52 2025 GMT
Not After : Jul 5 23:00:52 2025 GMT
Subject: CN=b501b14bdbee98a2a37bf3aa73841d6b2d709eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:7c:59:82:95:0a:20:a1:46:ac:a2:a3:1d:
12:91:f5:9f:92:53:ec:e3:93:2e:cf:50:fa:f4:81:
21:d7:2c:5f:a4:be:d2:35:08:89:f6:ba:9f:5e:cc:
6c:f7:bf:7a:0b:78:0b:a0:3c:37:f2:e1:c2:00:60:
0f:35:a9:e7:fe:33:b4:85:d1:d4:7c:da:7d:75:60:
c0:64:a3:68:f4:ad:37:1e:d1:ef:44:8e:bb:75:a7:
23:0f:57:c2:c2:3d:70:36:dc:c2:88:d9:20:dc:ee:
22:20:76:2d:f5:b4:8e:ff:74:b5:9c:10:58:b6:2d:
ff:58:89:c0:50:5e:c3:69:a5:2a:01:06:c5:be:ae:
6a:97:67:67:9c:d0:7f:91:cb:b6:0a:a7:61:90:b6:
47:d1:a0:c5:f1:6d:e9:9c:42:a8:19:18:3f:d7:94:
50:60:35:54:37:7a:d8:e5:6a:af:a1:df:19:d9:a0:
f6:ab:f0:18:f6:1f:1b:05:1e:29:d7:bc:f6:07:e2:
e5:ea:5b:3b:a5:3e:f2:67:c7:7f:bb:fb:0b:8c:3d:
3f:72:9b:77:da:cd:07:ce:06:70:43:1a:88:eb:3b:
e2:9a:5b:28:1f:a6:aa:a3:c3:2c:f6:51:b0:6c:c3:
b0:94:b7:5a:e8:a9:24:8f:e1:a5:9b:5a:e8:c4:b6:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:B1:4B:DB:EE:98:A2:A3:7B:F3:AA:73:84:1D:6B:2D:70:9E:EE
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:10:c3:84:81:4d:52:15:bf:d9:50:dd:11:df:53:20:0c:ed:
37:9c:a0:37:b7:63:29:42:1f:41:be:ad:ab:e4:6c:3a:c6:1d:
c5:f6:87:bc:2d:ad:7e:38:8f:03:78:fe:f5:92:cc:8a:62:64:
7d:1f:8a:66:31:e6:29:b6:c0:4f:47:4c:fd:83:44:63:8d:0b:
f6:e5:22:66:ea:77:60:cc:f3:e6:4e:74:8d:1f:5d:01:5e:8f:
be:6b:90:60:9e:8a:a1:b9:83:4b:34:89:c1:1e:6a:9d:de:36:
13:51:dc:48:d5:79:c9:56:5f:38:c9:6c:c9:20:fe:82:ed:c1:
66:b5:c3:ae:c9:b8:e8:6a:6d:11:6f:ff:72:27:42:57:d3:bd:
a0:f2:4b:a7:22:fc:06:92:29:87:ad:be:90:bc:d1:26:21:26:
b7:31:da:bd:a6:32:69:5e:e3:48:1b:2d:31:d0:7c:8f:36:80:
e8:09:d7:88:e7:b8:c5:22:74:dd:a0:28:ed:6e:0d:81:eb:2f:
ca:ba:34:4d:c1:bc:24:a5:89:01:c5:71:8d:5b:84:ba:64:3d:
18:16:6a:6b:e9:f1:36:63:5c:6c:b5:9e:91:2c:e9:09:fd:b5:
f5:2c:66:ae:98:a9:d2:8a:81:fa:4d:23:52:f2:5c:b8:a0:f0:
fd:b7:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:04:16 2025 by rpki-client