Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: qWFe+ENGp+q1QFYSBriOBl3MwygJnpJO4/0NrmgNmuo=
Subject key identifier: 0B:7E:D7:C0:B6:D9:EE:7E:34:9F:2D:F3:6D:D5:EE:11:CA:8C:52:F1
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 0197B6D766ADE439D618AE5AB73E8ED5E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0A68
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: kqJFkmQC7IJDc3/5THMmpWmlQE83HmXGGuTlkg37164=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:66:ad:e4:39:d6:18:ae:5a:b7:3e:8e:d5:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=0b7ed7c0b6d9ee7e349f2df36dd5ee11ca8c52f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:3c:94:6c:6e:6a:10:b8:ec:eb:f0:d7:90:
c7:66:16:42:7e:f2:69:d7:94:95:29:9c:91:a2:dd:
b1:57:9c:9a:05:ed:4f:e8:4e:1d:dc:17:f7:21:62:
5e:7e:08:80:c2:d9:71:57:59:1b:84:3d:34:77:dc:
35:e4:12:ee:cc:e7:dc:87:3b:3f:06:09:08:46:fc:
d3:49:0c:0f:7e:1a:53:df:5c:5a:b1:38:5e:0b:32:
a4:26:ce:fb:94:5c:ca:c4:06:da:65:d8:4e:6c:8f:
07:56:7f:2c:c6:b8:b1:85:4d:4d:86:5f:18:13:a7:
d8:26:08:4b:59:e0:06:86:bd:17:48:74:18:9e:e9:
2a:01:c8:ff:78:fc:62:14:06:43:da:04:09:66:1e:
ee:83:1c:51:57:8f:8c:1a:13:53:e6:9d:1f:d4:24:
5e:2f:f2:1e:60:8b:51:f7:db:c3:5e:b3:c3:88:66:
7c:39:2f:4d:fe:54:b9:99:5e:ff:58:60:59:1c:3d:
69:0a:2f:2c:63:0a:46:4d:3c:9c:a9:e1:c8:34:06:
c1:a6:15:07:31:b9:fe:c4:13:41:dc:35:3a:1c:f2:
78:e7:e6:98:f8:94:e4:19:72:e7:77:2a:40:27:48:
27:16:25:f5:c1:66:90:41:29:c7:84:57:20:a0:55:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:D7:C0:B6:D9:EE:7E:34:9F:2D:F3:6D:D5:EE:11:CA:8C:52:F1
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4d:62:d6:25:ca:be:dd:a2:ec:35:14:a9:14:87:ce:41:5c:
13:ad:48:d1:a0:ed:3f:4a:77:a3:a2:30:9b:d9:ea:7e:28:9f:
1f:d4:e6:6e:7d:44:20:ea:c5:9b:97:ea:93:15:c0:0b:af:ef:
53:58:ae:e6:dd:97:7e:83:a8:1c:21:86:bc:ec:5d:a7:f5:22:
73:3d:94:21:cd:10:06:7b:3b:61:37:7a:42:16:7e:20:77:e5:
20:90:02:63:ba:e3:11:55:68:b1:01:82:d8:82:bb:52:91:c1:
18:3d:e5:e4:96:20:25:96:70:9a:46:6c:32:f0:02:69:17:1c:
64:24:4e:24:9f:87:9d:63:27:36:85:4e:8a:fa:f3:d3:2b:cd:
f2:2c:d5:09:e5:93:8a:f0:71:b3:61:12:29:57:28:d1:36:2b:
57:e9:48:fb:a0:4d:15:5f:58:a9:7e:c7:df:b7:a8:79:d0:9f:
d0:b2:2b:22:57:08:f5:59:de:ef:50:47:b2:80:11:b1:b2:bd:
07:97:46:40:de:94:2b:a5:07:0a:db:90:e7:eb:ce:2b:8c:8f:
7d:06:04:32:79:b9:9a:4f:5f:17:5a:83:b4:5e:d8:d5:a2:26:
88:42:6b:b0:9e:36:d1:ec:8f:5c:3a:ce:31:c5:37:31:86:41:
05:f1:f3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client