Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: 2OuzOX9XWp9xo0DecMXd/EeaxE5q+aXIhmD/03pOODM=
Subject key identifier: 23:7C:AB:2B:63:D4:EB:78:93:44:93:F3:E8:F5:B5:CC:85:22:28:19
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 0197C8DDC64132F4222431AD5E7AD07EDA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0CA6
Signing time: Wed 02 Jul 2025 02:01:06 +0000
Manifest this update: Wed 02 Jul 2025 02:01:06 +0000
Manifest next update: Thu 03 Jul 2025 02:01:06 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: 7J7SQHGV6zS3Xijd7zRtVlMF1By0Zxa77s695jIXvtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:c6:41:32:f4:22:24:31:ad:5e:7a:d0:7e:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jul 2 02:01:06 2025 GMT
Not After : Jul 3 02:01:06 2025 GMT
Subject: CN=237cab2b63d4eb78934493f3e8f5b5cc85222819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:37:20:30:4a:20:5e:2c:0e:fc:d4:3e:6a:
cd:a7:bb:31:a7:1a:9e:e0:06:2e:d2:04:e9:72:a8:
ea:37:cf:6e:1a:59:d1:72:6b:d0:80:88:19:95:7d:
75:b8:f2:19:b4:07:9e:85:ce:32:7f:3f:3d:e8:28:
ec:dc:a5:04:b9:9a:61:33:1a:98:5d:23:24:05:bc:
ec:e2:94:a4:b4:e3:aa:ea:8f:80:e1:16:b1:a4:8b:
75:b8:89:1c:cd:90:6f:5d:37:47:15:39:6b:65:6e:
a1:a8:c0:7b:ca:9a:d6:07:84:b9:22:e1:fc:31:94:
ee:d9:18:50:f0:4b:18:77:db:ef:7c:5e:07:c9:d2:
d4:b7:71:0e:c4:f8:d5:fe:1f:fc:28:ba:b7:e8:55:
c2:fd:16:91:72:49:77:c0:14:45:ae:5c:53:34:33:
1b:be:a0:ef:e2:6c:2b:63:31:a7:56:d8:74:a1:80:
03:d4:3b:19:c2:49:67:ec:79:f6:da:64:ab:77:b3:
94:43:4b:b7:9f:7b:4f:45:fd:13:68:5d:3f:06:e1:
a5:ce:22:57:d6:d8:f5:b9:6a:2e:5e:ca:e9:15:cc:
91:f1:3d:f7:99:f2:33:f0:d9:46:6c:90:b0:5b:cd:
e4:75:d7:13:19:1b:b2:1b:f5:6a:f6:6c:24:bf:4a:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:AB:2B:63:D4:EB:78:93:44:93:F3:E8:F5:B5:CC:85:22:28:19
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fa:af:55:61:37:93:db:94:98:aa:77:27:cb:c5:1e:42:f5:
03:0f:99:e0:99:af:fd:36:e1:af:b4:a0:a0:60:af:75:49:63:
31:28:53:f8:9a:ab:9f:af:f7:3c:88:1d:35:66:5a:17:41:58:
c8:60:ef:e1:63:12:73:0e:e6:9d:04:9b:5b:b6:08:0a:5c:8e:
b9:01:b1:9e:6a:da:cd:6a:29:03:b9:c7:a5:d0:a4:71:31:bc:
fe:fb:27:31:17:c8:11:c8:36:f0:3d:59:90:54:e5:22:e7:da:
d7:5e:d5:66:43:b6:ea:c6:fc:89:23:95:65:0a:bb:4b:5e:30:
b0:8f:1c:93:58:4a:ec:83:a5:c4:c2:97:e6:cf:b3:9c:7e:b1:
c5:5e:de:ba:e0:d7:90:a9:2f:08:92:51:fd:1a:7b:f2:9a:a5:
ed:89:ea:f7:8f:88:ad:e2:ea:ba:f0:79:ae:d6:f1:72:58:d8:
02:a7:bd:c1:50:da:50:1f:82:73:df:dc:02:7e:f4:45:24:57:
22:33:6f:0c:e7:0b:07:ac:70:87:5a:f5:82:18:22:1a:96:9d:
90:e7:34:6e:c2:06:4a:87:c8:15:6f:29:01:dc:08:b3:5e:c2:
64:51:68:dd:5d:cb:9a:23:45:2f:32:1e:1b:69:1f:87:62:1a:
b9:55:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:45:47 2025 by rpki-client