Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: C07kUMUzmzeT+EnAsnXF2C4Y1B/6L5/aqPKhkVaQdS4=
Subject key identifier: 7A:3F:A6:7B:53:72:DD:B5:FC:5C:CF:E6:0B:DA:43:F3:38:3B:88:6E
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 0197C42603175E9F2D865A0AE7A2F2A86C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 0944
Signing time: Tue 01 Jul 2025 04:01:54 +0000
Manifest this update: Tue 01 Jul 2025 04:01:54 +0000
Manifest next update: Wed 02 Jul 2025 04:01:54 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: VJdwMh6C8UfUf1/CF7/9ObccTpms1mzi7rN+RQV4kjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:03:17:5e:9f:2d:86:5a:0a:e7:a2:f2:a8:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Jul 1 04:01:54 2025 GMT
Not After : Jul 2 04:01:54 2025 GMT
Subject: CN=7a3fa67b5372ddb5fc5ccfe60bda43f3383b886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:5f:8b:4f:0f:b3:f6:0d:ec:33:41:c3:4c:
c3:a7:18:4e:48:fe:4d:3c:35:af:f0:62:0b:83:2a:
f2:a9:78:4b:48:50:db:a2:e9:96:b8:6a:1a:0d:35:
39:ad:8e:ae:f3:a5:67:99:2d:01:ac:ac:f0:46:21:
5a:4c:97:c0:d2:cf:ad:a9:ce:e4:e8:f5:d5:df:27:
e5:08:10:92:d4:0e:22:50:45:7a:e7:90:aa:5a:38:
c3:fd:1c:27:72:e2:2c:3e:ca:05:2f:a7:c4:01:20:
81:be:f6:f0:b8:e5:ac:b7:bc:3e:99:01:be:7c:7f:
0c:9a:ba:e4:1b:07:2b:c2:8a:64:e9:51:09:d4:42:
04:0c:46:f0:81:7a:20:0a:1b:3c:1c:3d:3f:69:23:
14:cf:32:88:6a:1d:78:d9:56:83:9e:6a:04:32:f4:
28:cc:b7:0c:33:8a:4e:ba:98:bb:79:ac:68:0e:56:
e0:43:66:de:8f:c5:4e:d3:3d:5c:95:ae:91:f3:04:
23:ab:fb:8c:0d:92:37:63:97:31:d0:d8:f0:2c:fb:
73:58:c8:f2:aa:46:a5:94:2f:6d:c7:39:0e:43:90:
de:6f:ec:fd:16:87:84:19:0d:d5:36:22:c0:10:9c:
c6:7e:e9:1c:97:23:5a:4b:ab:14:be:0b:e0:88:53:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:A6:7B:53:72:DD:B5:FC:5C:CF:E6:0B:DA:43:F3:38:3B:88:6E
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e3:1c:03:47:6b:2f:47:3b:92:e6:99:90:c0:98:dc:e2:c0:
3c:98:cd:85:91:33:e9:a7:50:e0:60:44:c0:e0:c1:8f:06:36:
6e:fa:1b:9f:56:d3:38:1e:bb:a9:23:8c:27:73:a3:4b:64:62:
17:b9:59:44:e6:0c:c9:fe:f6:f2:46:dd:11:bf:76:f6:d9:93:
7f:90:e7:77:bf:6d:72:82:7b:09:f7:24:dd:9c:cd:3b:2a:ae:
67:1e:23:6a:5b:4b:3c:0d:be:21:7a:c7:1b:9e:af:e1:9b:dd:
d6:2a:81:27:26:70:42:a7:51:03:c1:be:ab:1e:7c:58:2a:48:
a2:17:5c:56:ce:6d:30:a6:64:00:8f:d4:63:12:0c:5f:9f:fd:
cc:c9:8f:60:fc:d9:89:3f:6c:8f:45:21:94:cf:df:15:a8:f2:
dc:ec:41:b9:76:64:0a:46:0d:42:02:30:48:51:e6:1d:cd:67:
70:99:51:78:86:16:2b:e8:7b:2b:35:d2:4a:5b:fb:f6:62:0d:
65:ec:38:25:28:2a:d3:eb:d5:01:5d:f9:cc:16:c3:7c:68:cb:
e8:da:7b:ed:f4:2d:62:7a:d3:96:99:56:62:3e:1e:9e:80:d8:
19:56:53:a5:be:0a:a2:4b:40:4e:8f:48:45:ea:eb:12:b6:e7:
b7:ae:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:25:35 2025 by rpki-client