Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: YV6/0fFDdCc+IWXx2R9bbZnoUFwXCABD/ebr4XAnkss=
Subject key identifier: 9A:7E:90:4C:71:69:81:71:89:34:8E:E8:F1:C2:A9:C5:0D:94:C7:46
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0197B7451CE5007F4F5B5203305AC6E03D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 137F
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: 6zfciFfp69HAFN6D1XPvBb3fxrexPJSAP3aS4OhgEJw=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1c:e5:00:7f:4f:5b:52:03:30:5a:c6:e0:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=9a7e904c7169817189348ee8f1c2a9c50d94c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:8e:71:9a:e5:bf:78:24:23:a0:54:72:31:
d8:87:bb:2f:9d:f6:c3:88:5f:5e:66:12:89:e9:f7:
98:a5:32:cc:2b:2f:32:9e:3e:d1:f2:91:60:6e:7f:
c6:89:d3:de:96:76:1d:6e:af:d1:eb:11:d6:da:71:
c5:9c:ff:17:08:4a:88:f3:44:9c:95:dd:81:13:15:
2e:6a:d3:cc:ab:46:72:25:98:ec:35:31:77:ac:85:
5c:6f:0b:88:0b:be:0b:af:ca:57:21:f8:71:58:83:
98:ee:b2:0f:ec:ac:41:d4:d1:fe:a5:61:51:3f:ce:
2d:2a:22:17:46:81:35:f4:60:0a:18:2d:91:a9:3b:
e6:4e:20:e9:f8:d0:08:28:20:78:2e:29:7f:66:4f:
04:9c:3e:4a:a8:02:e8:5e:63:1b:66:eb:89:81:a6:
f7:11:31:6d:a2:c7:ba:83:ea:57:f6:f4:9f:55:78:
75:8c:38:6a:a4:db:98:f9:b2:2d:9b:e6:af:ef:ce:
c1:e9:20:5f:e7:16:3f:72:89:75:5f:3b:2a:dc:73:
46:f2:ff:75:ec:e3:dc:b2:3b:fd:e5:3a:df:98:db:
44:b2:83:df:4e:1c:7a:fd:da:d8:15:79:83:b3:76:
3d:a1:bf:03:61:16:db:82:2d:72:c9:f9:28:28:03:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:90:4C:71:69:81:71:89:34:8E:E8:F1:C2:A9:C5:0D:94:C7:46
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:0a:2d:85:89:ed:92:4c:21:f8:2a:e9:d8:53:b5:49:c3:
c7:f2:9e:60:3f:47:5e:54:e0:d5:9c:89:a2:c3:35:54:de:d5:
26:f6:c3:2a:ed:4a:bc:5b:e8:4d:79:28:29:78:a5:6f:e4:b4:
1c:b5:ef:0a:2d:67:6d:eb:4d:f0:19:1a:f4:b7:99:7c:c6:cc:
af:48:96:f6:1a:12:b9:8a:44:68:a7:a1:ed:11:70:e9:26:f1:
f4:30:aa:33:de:c1:92:ff:cb:b6:5b:21:59:af:e4:d2:1a:b2:
37:dd:43:bc:f9:b6:b7:62:0a:d7:2c:41:7b:47:7d:f1:67:ef:
0b:6e:20:f4:8f:15:f2:ae:76:db:88:06:83:4f:22:1f:2f:35:
b9:c0:b8:29:62:74:44:1b:61:57:30:3c:fe:cd:2c:9c:80:ba:
20:2c:ad:d3:ef:5d:6e:64:db:43:1c:32:97:e1:cd:29:2e:58:
98:3c:8b:21:8b:4f:49:77:e4:3f:e4:eb:7b:fc:b0:f4:a2:92:
87:eb:2b:fb:7b:4b:82:78:04:b7:d0:bc:d7:04:9f:29:81:8b:
be:2a:6b:84:98:a3:7a:af:00:5e:69:1c:00:3b:11:5f:f7:ca:
91:46:91:ee:b2:f5:4d:b0:78:81:08:fc:a7:73:b3:c8:7a:47:
22:d8:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:29 2025 by rpki-client