Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: 83w01Ab44sJQy5UIENYaKu3xxnu5aWqk6vCfhvaGRzE=
Subject key identifier: 31:9B:E0:60:1C:B2:2A:03:48:5F:30:7A:DA:68:D8:9C:4B:A7:5C:49
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 0197B6D742D8692FE0BA1F522D3B08CD52D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 0FDC
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: lDqDPLjJvXlAOj6/mKICd+mej+eOJTwQERY2Do887N4=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:42:d8:69:2f:e0:ba:1f:52:2d:3b:08:cd:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=319be0601cb22a03485f307ada68d89c4ba75c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:a4:cc:15:ee:74:40:e8:83:52:f6:97:b1:
b2:5b:82:d7:d4:2b:5b:25:dd:e4:21:cc:68:18:46:
f2:48:d3:e2:91:78:c5:4e:be:5b:37:48:31:f6:b9:
57:74:40:33:65:e3:c4:29:6a:a3:a7:9d:1b:30:53:
80:f9:6a:c1:19:55:42:7d:3a:1c:39:e5:42:46:5d:
67:5d:b4:a6:7e:8f:cf:ef:2c:55:77:92:ff:51:d4:
e3:5d:e6:e1:3f:50:21:ee:bd:3b:3c:92:f7:2d:c7:
29:73:4e:46:bc:d8:d2:33:49:df:46:8e:b2:42:a3:
66:e6:6b:08:bb:4b:73:9a:fc:d5:ce:06:2e:95:44:
ab:4d:d0:b5:7d:a7:f7:ba:43:c3:80:ea:b1:5b:fc:
60:67:1c:6c:18:82:b9:5c:ab:65:25:60:7b:56:65:
78:c4:43:2e:76:ee:3a:11:3e:87:ca:e2:fe:04:30:
0a:18:20:53:d5:48:c2:87:f0:18:52:e9:6c:b1:1f:
49:fb:db:30:71:be:e9:9a:76:63:f7:0e:cb:39:e1:
95:16:aa:76:db:c7:df:bd:6b:d0:47:5a:54:7f:3b:
2d:77:09:d1:57:39:cb:0f:56:1c:27:38:2f:a4:d3:
c8:73:7f:fc:44:c6:5a:cb:43:0b:19:88:0c:9f:e9:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:E0:60:1C:B2:2A:03:48:5F:30:7A:DA:68:D8:9C:4B:A7:5C:49
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:4f:08:7e:c6:30:22:2f:cd:aa:79:5c:10:09:b3:e9:fe:
e3:33:47:50:0b:7e:5a:6f:bf:39:3f:0d:4a:ec:4d:97:02:b6:
ba:64:07:87:cf:b9:95:bb:78:db:68:c1:32:0d:01:1a:ae:bb:
ee:ae:78:da:38:0e:db:52:b0:22:ee:cf:b8:c6:9b:9a:18:c2:
69:8b:3f:dd:d6:0e:d8:30:a1:91:8a:d2:91:89:93:86:28:14:
e9:af:47:d8:80:7b:fe:d2:c2:0a:39:e1:a7:f6:40:1d:32:ad:
91:7c:d9:d2:5a:32:4d:62:48:8c:a3:cc:c9:7f:71:b7:3c:95:
6c:f2:46:11:0f:a4:e5:68:ef:34:bb:6f:d5:6e:dc:a6:08:79:
cb:f8:10:9b:5d:46:81:2d:35:64:05:3b:29:69:1d:27:6e:53:
d6:fd:4a:cb:25:73:ed:88:83:fc:d9:03:29:cc:0b:ab:7b:2a:
7a:99:0e:7f:d3:5a:49:1c:47:0b:45:52:76:1a:ed:80:88:b8:
02:85:44:5b:22:6b:eb:60:ae:43:24:7f:a7:bd:88:fa:76:ee:
97:72:24:24:91:b6:70:ab:3e:e6:5d:c1:7b:61:ac:0c:86:6b:
07:b4:70:42:64:64:f7:7a:3c:49:77:b9:16:c6:62:2e:2e:d6:
33:90:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:33 2025 by rpki-client