Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: FZ85w3QVYTM5etWEKxRoW2AMothY/lMnC6QQZwDmcwE=
Subject key identifier: D4:1E:B9:1F:72:3E:16:41:EB:1F:3B:27:B3:10:42:C0:80:16:73:DA
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 0197B70E81D80C00DF573D85853C46A14C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: fxb7+MR4keh/HPjEHK1qISErJ7No8GDdKT3cFF5PlHo=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:81:d8:0c:00:df:57:3d:85:85:3c:46:a1:4c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=d41eb91f723e1641eb1f3b27b31042c0801673da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:ec:bd:5e:8f:dd:b1:80:c6:11:ff:a6:eb:
17:49:60:ef:e1:ff:b4:3e:7b:ea:d1:0f:02:5c:13:
c3:89:8f:74:cd:f2:17:b9:ed:b7:fa:54:0c:3b:0e:
d9:c5:5e:5d:f0:31:a5:c5:7a:3f:ea:ee:e8:b0:8e:
8f:55:b7:7e:12:96:7c:39:33:9b:25:6b:32:f5:e0:
f0:62:d5:eb:2f:b8:81:65:1c:95:f3:22:bb:bf:c1:
ee:59:67:60:fa:f7:f7:d5:bc:32:78:18:8d:7f:fb:
c9:19:da:c0:6a:9c:3e:0f:c8:a5:6d:85:9a:a0:46:
51:8c:62:24:00:b1:8d:7c:0b:67:8d:2f:4c:c2:c1:
0a:e6:dc:0e:51:44:d0:84:17:46:65:6d:42:e0:6c:
ef:6a:f2:6f:01:45:7d:b3:c1:a3:c8:88:5c:8b:e0:
e5:ee:75:59:6d:30:9f:fc:2b:f1:ea:64:37:a7:a9:
e0:f7:a6:c3:1c:18:f4:8c:f3:65:57:a0:6a:e2:9e:
9c:65:3c:9d:e4:cf:ca:2a:26:2f:11:3e:50:12:8d:
ab:9f:58:64:c8:8d:dc:11:72:f4:33:86:09:df:07:
14:80:30:c8:eb:c2:9f:62:99:ba:e6:dd:0d:aa:2d:
a8:0e:f3:57:73:56:a9:89:aa:e1:74:28:30:b2:ca:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:B9:1F:72:3E:16:41:EB:1F:3B:27:B3:10:42:C0:80:16:73:DA
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:a3:01:1f:aa:b8:bb:99:a1:b9:4c:09:e7:90:cc:8f:f5:
a0:b0:5b:dc:e3:16:27:18:b5:a0:44:09:25:17:1e:1b:28:3d:
b2:50:76:6f:2d:db:e4:85:04:1d:57:ff:0f:c8:1a:de:c8:ea:
0f:e1:0b:75:26:91:05:6c:4d:40:08:9d:57:d8:0a:b0:ed:d2:
ba:1c:1a:b0:90:89:fd:8a:71:fe:c7:6c:41:e3:86:eb:0b:25:
a4:10:e5:3b:84:5a:0f:07:5b:44:fc:d8:f1:04:d4:5f:f5:33:
5d:1a:30:f7:e2:ed:af:36:c5:af:85:e9:7c:94:79:b7:1a:ee:
68:7d:aa:2e:0b:74:5b:48:e9:a1:51:08:ed:eb:c5:1b:2b:54:
71:05:c5:d0:a2:03:db:84:9d:fc:38:17:60:dc:57:d1:e6:9f:
2c:a1:fc:17:97:f7:36:6d:e8:74:7c:ab:ca:29:ae:f2:af:3f:
bc:51:54:7e:bb:64:30:59:64:56:6e:c6:d7:1f:0a:03:b8:24:
99:56:1a:95:f1:00:87:1d:32:01:55:ef:99:a4:1b:b4:7f:5b:
da:48:fd:2e:15:90:f8:74:eb:2d:37:6e:3e:4f:e1:3a:c8:83:
05:43:0d:79:6a:eb:5c:8a:43:2c:db:c2:54:7c:97:f8:4d:42:
0a:31:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:14 2025 by rpki-client