Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: fQsh3aZtAs0IYK71gQHmcq/ezoek86f0eCp0EpXQYNE=
Subject key identifier: 52:3F:C7:20:8F:AE:50:C5:87:F4:C4:4C:00:4E:F8:5E:67:EC:D9:88
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 0197B933E283F02181C0BD197D9C69D6085F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 1359
Signing time: Sun 29 Jun 2025 01:01:14 +0000
Manifest this update: Sun 29 Jun 2025 01:01:14 +0000
Manifest next update: Mon 30 Jun 2025 01:01:14 +0000
Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: x5E7wqHPWWIpTjzvNBvnJcHWvx1v8ENQzZj4+/S9Ibk=)
2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:e2:83:f0:21:81:c0:bd:19:7d:9c:69:d6:08:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Jun 29 01:01:14 2025 GMT
Not After : Jun 30 01:01:14 2025 GMT
Subject: CN=523fc7208fae50c587f4c44c004ef85e67ecd988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:8e:09:7d:fa:48:0b:66:c4:92:66:57:c2:
a1:4f:08:be:39:c6:d7:88:4a:05:08:89:5f:80:bf:
65:c3:59:3c:42:cd:a2:42:f0:59:78:d7:29:57:41:
f6:7e:6a:8a:fe:d2:47:27:b5:95:94:cc:0c:25:ba:
06:36:d8:d5:61:38:93:f8:de:b2:40:a5:5e:29:62:
02:8c:f2:8e:a5:d0:cd:13:ba:4a:5d:b8:35:d3:30:
1d:30:d6:7d:99:46:26:98:a6:09:c0:a5:c5:c9:bd:
d9:10:16:b6:72:cc:87:a5:c8:b7:3b:6e:ae:94:ed:
60:99:d0:c2:0c:65:5b:49:33:44:b6:be:76:c5:e1:
3e:5a:2c:f5:0d:23:bf:88:40:47:cb:b2:69:11:17:
04:85:87:ce:56:1f:37:86:d3:d8:44:4e:21:1c:4c:
23:3b:ce:98:0b:37:e5:d5:5b:b2:cf:ad:a9:7c:d0:
3d:24:74:fd:c0:ef:17:c9:0d:c1:29:ed:f7:67:3f:
d1:16:16:ea:36:3e:3b:da:c8:fc:7b:b7:3d:46:b2:
27:ea:4a:5d:5e:ab:7a:75:02:ea:79:d0:9f:10:ce:
ba:3d:ea:8a:29:64:d7:36:d8:4e:7d:dc:d7:d3:84:
c3:d1:bc:36:30:8d:b0:a1:bc:5b:7e:b9:5b:b6:ca:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:C7:20:8F:AE:50:C5:87:F4:C4:4C:00:4E:F8:5E:67:EC:D9:88
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:fe:6d:27:70:a1:9f:2d:26:0c:ae:be:47:c6:52:b1:c7:
cd:3b:66:87:30:72:a4:94:49:44:9f:66:17:81:1c:17:24:9d:
57:ac:cb:7d:6d:d2:c2:51:49:64:da:06:22:c1:90:7f:86:56:
05:c1:7b:74:74:70:f0:b8:77:e2:3d:af:43:7b:55:6f:86:06:
7d:78:6b:c9:84:0f:40:1f:69:04:94:e7:be:e0:bd:61:1c:b8:
8a:c8:b2:85:df:3a:3f:7c:ca:67:2c:02:d4:59:61:8e:49:bf:
78:71:86:fa:16:2f:4b:36:cf:aa:a9:ae:02:89:69:b9:8a:40:
e1:94:d7:54:84:24:8d:67:70:58:b9:7c:78:4b:49:5c:2e:35:
8a:4b:13:c7:ea:f4:cc:7f:88:f8:09:d9:d8:b8:f6:7a:83:4c:
d8:cd:00:a5:c0:8f:b0:4d:0e:b9:5f:43:0b:23:52:1b:fd:6b:
96:50:7c:27:2f:19:ec:12:cd:0a:ca:32:cc:7d:b5:e3:c5:72:
15:25:c4:64:96:91:19:d1:a4:93:26:8d:9d:84:4a:9d:a8:e2:
36:89:46:9a:73:14:68:9e:04:14:55:67:5e:d2:18:35:f0:c4:
12:7f:13:10:de:f0:e1:3f:27:55:ae:89:95:cb:04:c6:a0:fd:
6d:12:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:12 2025 by rpki-client