Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: iH1fgC7fK8MfqJGaY5fQ2rLnrsgOsoMSYqWqy0nSdLg=
Subject key identifier: 75:A5:7B:E0:73:40:4D:D7:FC:81:02:00:2F:40:FF:4A:5D:0F:16:08
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 0197B6A11A026F17AB5DEFC89A159E1BDFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1260
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: +PYP20TjL+5fDD0py5Fo2XOerSPPpznjX8yw0ug9BZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1a:02:6f:17:ab:5d:ef:c8:9a:15:9e:1b:df:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=75a57be073404dd7fc8102002f40ff4a5d0f1608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:ca:fe:ca:28:53:2a:71:dc:f2:14:5e:22:
ad:d6:87:02:4b:7c:7d:fe:07:ab:10:8f:ab:6a:34:
e7:31:4a:f3:70:96:19:d7:29:09:37:b0:1d:e3:e4:
c5:b0:ab:27:53:2a:3e:17:49:d9:4d:7a:02:94:64:
de:00:8b:95:bd:e0:ec:be:86:b3:e7:4d:1e:18:c7:
4e:2c:3e:10:28:64:d9:40:0d:de:8e:28:a3:2a:21:
6d:49:0b:5f:d0:82:30:ca:de:a5:9b:29:99:2c:9e:
63:b6:7a:1a:7b:fe:db:10:a3:71:0f:cf:b4:30:71:
26:56:06:a0:35:7c:25:12:93:90:7a:fe:c6:3a:68:
65:51:e2:20:b8:10:28:62:6f:17:15:05:82:1e:76:
8c:07:f3:ca:e9:9c:7f:1d:b9:1a:cb:14:6c:89:e8:
77:60:13:1d:39:3e:3b:e4:fc:7a:db:80:02:5a:f1:
ee:3b:03:bd:30:f9:de:d9:c7:57:b3:49:7d:db:e2:
8b:e9:5d:aa:2a:76:27:5c:0b:e1:54:0d:7d:e4:eb:
0c:e2:a4:dc:9f:16:55:2f:7d:df:6e:c3:cd:3d:58:
41:e2:4b:63:97:e1:76:a6:03:fd:b5:7d:23:4b:9b:
61:58:b4:11:a4:e6:2c:7a:a7:9a:cb:18:9e:a9:ff:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:7B:E0:73:40:4D:D7:FC:81:02:00:2F:40:FF:4A:5D:0F:16:08
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:51:33:3f:d2:f3:79:28:10:a5:63:ef:b8:7f:a9:17:e2:85:
03:92:45:a6:7d:ad:aa:9e:ca:a3:19:f3:44:58:7d:c1:25:e9:
8d:93:bb:2e:94:d6:d0:b5:e6:10:fc:61:b4:15:75:d6:dc:a7:
f1:6c:a0:9e:c2:46:4d:2f:78:8f:c7:4d:54:98:6c:b6:ab:46:
da:5f:11:25:53:5a:eb:f0:c5:8e:23:55:d2:e4:ea:ad:73:1e:
05:7d:20:52:25:b3:e9:41:ad:08:49:57:67:26:7d:85:61:57:
9f:21:a4:60:a1:52:b3:df:86:28:c8:dd:60:d7:f7:58:cc:9c:
b3:8b:62:85:18:7d:5c:fd:5e:7b:b2:ff:f7:ad:0b:6d:9c:c2:
08:dd:59:e5:2f:b6:77:65:54:1a:23:0a:f9:e5:01:55:07:27:
de:2e:ce:d6:1e:fc:31:d0:fb:66:23:ad:21:70:51:8c:9d:e0:
73:cc:e2:88:68:f4:10:fc:cc:24:b3:77:4f:36:80:a0:b6:bd:
84:53:ee:c0:82:83:6f:b8:1b:7b:0b:3f:fd:6d:f0:f5:8a:36:
0b:4d:8d:9e:93:13:b5:be:51:e5:b0:8a:c6:d7:d8:83:a9:78:
7a:6b:ea:53:b4:6e:7f:c9:8a:22:c7:bd:29:ea:ea:09:94:6c:
6e:73:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:29 2025 by rpki-client