Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: SQ124SVA9eL1VMMPgD40lyxpzm2CUAHDzHNcx88DNSA=
Subject key identifier: 05:43:2E:F2:AC:1C:D6:FA:A6:FD:94:3E:30:2C:87:93:50:7F:9E:26
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0197CFBB954A510D4B85F0654C32FFF9C3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 10:01:06 +0000
Manifest this update: Thu 03 Jul 2025 10:01:06 +0000
Manifest next update: Fri 04 Jul 2025 10:01:06 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: LZoU1n6UkWuYXPMJs7mRuzFseLC2bR0l0suko9aj974=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:95:4a:51:0d:4b:85:f0:65:4c:32:ff:f9:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jul 3 10:01:06 2025 GMT
Not After : Jul 4 10:01:06 2025 GMT
Subject: CN=05432ef2ac1cd6faa6fd943e302c8793507f9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:ef:ef:84:a8:59:9d:26:b4:19:22:40:5a:
3e:00:1f:04:62:4b:28:2b:e8:13:b1:75:4d:bf:96:
2e:b7:10:aa:d0:64:94:06:a8:82:72:36:ba:b9:0f:
fb:0e:d7:f7:bf:8e:b2:a5:fd:42:f5:cd:43:e3:27:
0a:2e:f9:6d:7e:4b:2f:21:58:99:38:ee:cf:ce:24:
b1:e5:88:d4:4e:8c:6b:33:65:34:2f:47:10:db:49:
ee:18:ae:9e:e8:fd:29:8e:a9:b3:1e:0d:0d:44:a2:
40:27:c1:c7:b7:9b:2c:21:71:0c:17:71:55:0f:51:
9b:8b:89:2e:f2:80:e0:2a:a8:e7:0a:71:c5:b6:f4:
03:4f:a9:8b:e8:39:34:13:3c:67:34:53:41:74:7d:
f9:ea:f0:d7:10:71:3c:ad:7f:f4:90:41:83:4d:a8:
03:8e:c6:b4:83:bc:f5:10:87:b9:7d:7d:e3:f8:1d:
c6:80:9e:81:0f:ee:02:af:f0:d4:6f:6e:7c:28:cc:
60:5d:2a:e2:8e:29:2c:40:f2:72:97:f0:dc:f6:e4:
24:31:1b:11:13:38:2b:a5:16:18:6c:cb:08:6f:87:
c2:70:9d:1a:8f:a8:0c:ce:06:4d:8a:c8:6e:f7:db:
29:45:54:b1:a1:14:6a:60:23:cc:df:58:5a:70:98:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:2E:F2:AC:1C:D6:FA:A6:FD:94:3E:30:2C:87:93:50:7F:9E:26
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:52:b6:66:6c:ce:51:5f:d3:b7:e1:bf:a6:6b:84:2e:aa:25:
b2:23:a8:fc:b4:28:12:63:6e:e4:ca:62:6f:5f:6f:2a:e1:87:
ac:fb:65:89:e5:d1:e0:1b:42:11:7d:72:9a:cb:48:de:49:0b:
a0:af:ba:5e:1e:49:d4:b2:7f:81:e8:d0:79:f5:4c:58:4e:64:
63:fa:3e:59:fd:e7:5e:20:7f:dc:33:8d:b9:ad:e3:a7:50:1b:
88:af:64:d3:c5:79:6f:c3:f8:33:27:1a:58:b7:65:e0:ad:e4:
51:d1:97:f9:c8:be:81:c7:de:4a:45:4a:b7:ac:60:a0:17:ca:
d5:fa:0e:11:b5:6a:67:76:d2:bf:3c:2d:f3:2a:46:a3:ba:9a:
2c:e1:84:3d:56:a8:77:7f:1b:1d:d6:6e:90:b3:ed:d0:03:d7:
fd:78:29:f3:d7:1f:42:28:e0:1d:62:18:df:78:88:30:e7:ef:
25:f0:a3:f8:cd:fb:ec:de:45:e9:ac:5a:89:e9:e3:88:df:af:
00:d6:fe:2c:77:51:0a:7b:83:59:e5:53:da:98:42:6c:83:f5:
f9:a9:59:5e:f3:80:ab:9e:ed:d8:aa:dd:e6:89:f5:a5:bb:8f:
04:3b:f0:50:68:97:71:ea:1b:3f:2a:4b:33:47:68:d0:84:3d:
bd:28:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:10:05 2025 by rpki-client