Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: Q8pdeog0wUlnpjN+dBLcQJDrZIkMYiM2TQeVSIijPCw=
Subject key identifier: 40:C2:F0:59:20:0C:98:6E:08:48:5F:3E:0E:87:BF:11:8F:45:E7:79
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 0197B70EF90479FF533829FEFD4155FFDEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 10FA
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: blA8HyIrEmyfRaOAKPvT+6USE/BQNqBDCIVJA7bA6fg=)
2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f9:04:79:ff:53:38:29:fe:fd:41:55:ff:de:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=40c2f059200c986e08485f3e0e87bf118f45e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:5b:be:18:e1:05:4c:f3:3f:cb:01:4a:55:
c3:97:ee:70:97:cd:75:3c:57:bc:e9:7a:09:2f:d4:
8e:43:8b:c1:8c:8f:7e:eb:c4:80:99:2a:e4:da:87:
2c:93:00:b2:56:4a:c1:fc:a2:40:5d:e0:65:8e:6a:
2a:fb:78:93:c8:ee:ff:65:bd:43:6e:9d:67:60:b4:
db:79:b9:23:4d:25:68:17:fd:63:39:6f:e2:22:f9:
2e:d5:1f:2b:26:95:db:fc:02:8f:bc:ed:25:27:3e:
57:2a:39:9e:c8:9b:45:9b:0d:cb:fe:7e:fc:0d:ef:
ff:6d:94:56:e2:8d:33:80:83:b9:38:86:ca:14:46:
27:a6:e5:cf:d4:b7:f2:34:12:64:5e:b3:e3:92:df:
85:c7:b7:6a:43:42:b9:87:0c:cd:04:68:92:12:29:
e4:c8:08:4e:c6:95:14:17:c5:70:90:ee:80:8a:e9:
ca:1f:05:18:ee:b2:69:7a:1d:eb:bc:be:24:cb:15:
bd:23:dd:c5:7d:4c:59:31:2a:00:fa:2e:33:38:22:
00:25:a4:9c:2b:d6:34:da:47:b7:ba:c4:81:0c:97:
a9:7e:18:6c:35:ea:8e:04:43:be:1d:8a:a6:c7:c2:
76:df:e9:6c:f0:6f:8b:a2:d4:ef:49:54:2d:83:f6:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:F0:59:20:0C:98:6E:08:48:5F:3E:0E:87:BF:11:8F:45:E7:79
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:c6:c0:bd:6b:eb:69:a5:9d:8f:28:d1:1c:18:8c:04:64:
7e:cc:10:82:25:45:68:bd:4a:03:78:30:5e:64:13:9a:df:09:
c9:0d:fd:d3:b5:67:a0:4b:36:c2:f7:54:5c:4c:7a:ab:4a:fc:
b9:30:d0:16:93:0a:34:6c:c5:38:3a:95:59:df:c4:ee:82:57:
13:36:0b:52:44:7e:54:92:8e:b6:0f:77:24:53:4c:1d:4c:d5:
8c:d2:46:27:f9:79:17:62:e5:0c:2d:0e:9f:4b:4e:15:73:e5:
a0:b3:bd:e4:ca:08:a1:76:fe:45:b4:55:60:18:aa:e1:0c:a7:
d2:6d:1b:ed:5a:3e:79:ec:a4:5b:aa:21:b8:f2:57:4e:05:a1:
ef:25:44:6a:7a:75:ed:f8:de:bf:ff:ff:f1:82:62:b9:2d:24:
41:d5:b6:04:4c:e3:95:51:76:9e:94:cc:18:16:0a:9d:c0:8a:
1f:fd:d3:40:5c:31:28:bb:5f:6e:c8:ab:d8:cd:94:4b:7c:9f:
2e:2f:01:5b:98:2b:2f:5b:28:19:72:88:5b:b8:5a:4a:1b:d9:
77:9b:61:5c:ef:c9:9e:95:7d:47:0b:66:9b:e4:0a:cd:dd:fd:
c9:47:2f:8d:04:75:a5:cf:d9:be:ba:b8:67:77:69:e9:e4:d7:
bc:9d:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:42 2025 by rpki-client