Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: DEacvYjPEWtBQcWtMCoGv2KAl1J/pF1WvOhULUKi4p8=
Subject key identifier: AC:91:06:F0:4B:75:38:58:F2:8D:FB:76:09:12:11:FC:63:48:7F:8C
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 0197B745A9E94A617EF6045B85185B78FC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 6Rs1qPpd+wbif6Fj4zET0uLVlQHhA8me5FzOLZiCeUE=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:e9:4a:61:7e:f6:04:5b:85:18:5b:78:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=ac9106f04b753858f28dfb76091211fc63487f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:d3:f5:2d:44:85:f9:7d:12:c6:04:32:9b:
9f:c3:5f:b2:f7:db:54:f5:88:56:fc:a8:b8:53:e4:
43:a8:dd:62:17:75:2e:1b:25:5e:ee:aa:54:d4:68:
e6:52:9d:ec:8f:d3:97:d8:f0:4c:59:87:9d:d7:fd:
79:e9:30:b7:1e:0d:ff:37:d1:af:e2:2b:6e:e7:43:
81:d0:96:da:c1:81:c8:3c:86:74:e8:9f:84:ec:35:
97:40:1a:e5:7a:96:51:13:c3:ce:a3:ef:02:df:20:
dd:55:7b:cc:66:a2:4e:d3:eb:51:46:63:2b:3a:ef:
48:9b:f7:e0:12:b0:4a:25:d0:4a:a9:dd:b0:88:20:
8f:1d:8f:5f:1f:da:5a:3c:fa:15:7b:17:75:90:15:
9d:2d:4a:97:d2:b8:23:d8:bf:5d:bf:4a:28:e7:42:
ed:97:1a:54:87:f7:2a:59:bb:ab:f4:e8:61:26:c3:
e0:85:af:e9:17:c7:a9:17:3f:57:bf:96:93:f1:37:
ae:42:dc:9e:72:55:1f:5c:94:98:40:a9:f1:d0:f4:
75:25:5a:7b:3d:e9:39:3f:96:39:87:ca:b0:db:b9:
f8:95:7a:ee:38:2e:c9:4e:50:42:0a:ac:d5:a4:8b:
e3:97:48:48:d1:12:0f:98:ad:b1:ef:fa:a0:60:96:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:06:F0:4B:75:38:58:F2:8D:FB:76:09:12:11:FC:63:48:7F:8C
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:70:c9:6a:55:64:44:74:bd:02:4c:4f:a4:44:bc:67:83:e9:
eb:d7:c1:09:d4:ec:89:fb:4a:f7:fa:7b:ee:61:57:bf:fc:d5:
3a:8b:04:a2:1a:55:37:f5:44:87:90:9f:f7:f8:5c:54:14:ab:
4a:c7:d1:1b:1c:68:42:31:0f:3c:56:82:43:c8:e5:c4:c3:e8:
37:c2:6b:c0:e6:d3:e7:84:15:63:d0:30:86:57:27:cc:c3:c9:
af:66:75:58:04:33:ea:e1:83:cc:70:5c:2b:7f:6f:f8:33:35:
ee:ad:22:d4:7f:90:ad:b2:d1:83:3c:2d:bb:85:ff:36:91:d8:
4b:d2:d6:08:b4:69:05:2d:bf:34:c3:0f:e9:af:80:63:cb:21:
4b:df:15:b1:22:fa:e4:bf:18:68:8a:c0:64:c5:e7:47:8b:f0:
3e:a5:c6:85:49:ea:08:2c:1e:18:63:c1:ee:c3:09:77:fd:d8:
5b:a9:87:8a:3a:b6:76:ee:b9:f6:97:cc:f9:c9:39:e9:b5:ad:
51:0b:4d:c8:e0:00:28:7a:d6:79:ae:42:c3:ba:02:71:9f:f6:
6f:09:d5:94:98:85:05:74:09:a3:16:21:f5:ce:10:41:c8:47:
86:25:71:03:d3:08:43:d6:d4:f7:9d:d7:5d:1b:3f:24:fc:a0:
86:69:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:09 2025 by rpki-client