
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: 2xWbPVFqRZOFP0lpjG5sVPD1wcAJ+rMvJesII5RSA9M=
Subject key identifier: 69:B2:0A:1B:86:53:D0:C3:58:7E:34:3B:38:3C:D9:74:E8:84:36:7A
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0197B6A077E14D02EA7B5F38DD6D15DB89F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 046C
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: KClW7mRLIKSMalmVRoCKHQSx/lb8/6k9RzylRVNeolA=)
2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:77:e1:4d:02:ea:7b:5f:38:dd:6d:15:db:89:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=69b20a1b8653d0c3587e343b383cd974e884367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:81:97:8a:aa:c7:75:2c:d3:88:27:84:94:
06:ab:c3:d0:41:02:46:f9:d4:f1:1c:e3:71:70:50:
1b:be:9d:04:5c:d1:2d:81:11:23:5f:cd:8e:54:1c:
bc:c3:10:15:32:c7:78:53:7f:29:30:9d:45:cd:32:
86:3f:70:73:92:ac:a1:6c:ae:ef:cf:f1:7a:06:1b:
f9:43:42:b7:54:1e:41:18:29:3e:05:68:8a:23:cf:
83:d1:94:4d:ff:a0:67:df:c8:66:47:f8:65:22:79:
58:a9:16:6f:10:58:ae:02:f3:f9:5b:42:a5:5d:50:
98:de:58:4c:ea:22:61:33:0a:73:66:c1:04:72:25:
e4:18:df:12:3b:59:e4:d3:f4:15:03:1f:59:9f:d1:
f0:6e:d6:3e:67:0b:b5:c2:7f:e4:50:68:de:fc:78:
28:6f:a3:a2:ed:2e:c9:90:48:97:85:1f:86:6e:46:
95:bb:63:d4:95:fd:33:79:b7:9b:52:98:e9:c3:c4:
5e:ff:07:f1:0c:a3:f3:58:16:4c:97:fa:09:89:eb:
90:db:aa:e8:d7:f2:ac:de:a3:9c:21:ba:00:82:b4:
92:01:ec:79:bb:36:7f:f0:70:1a:9d:f9:92:c3:f8:
8a:7e:a4:78:2b:87:df:94:18:e4:e0:82:b0:d1:e7:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:0A:1B:86:53:D0:C3:58:7E:34:3B:38:3C:D9:74:E8:84:36:7A
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:c7:0f:c4:d3:3d:54:b2:74:14:83:4f:80:5a:33:61:f7:
c0:7f:d7:27:54:53:b4:87:05:49:d8:b3:17:3f:a5:ec:77:73:
e8:2d:05:9f:72:74:21:66:b3:a6:e3:9e:c7:eb:df:30:52:70:
7a:44:91:6e:b4:7b:fa:06:4b:c2:93:34:7c:80:b1:a7:1d:b5:
57:d9:4f:5d:99:a8:59:d2:06:22:3c:68:fe:4c:8b:dd:a7:54:
69:cc:4c:80:ff:67:f8:a3:4c:9d:f0:77:f0:67:2e:df:da:da:
f6:a5:7a:60:9e:e0:52:6d:9e:f8:5e:ef:f1:38:1d:55:23:c4:
cc:34:fe:a2:ec:29:85:fb:a0:0c:2c:19:6d:bb:31:19:0d:b4:
6b:01:3d:f8:ed:fb:78:53:c5:f6:fb:e4:56:3f:7a:49:97:ea:
79:bc:ac:c2:7b:cb:27:92:95:63:96:b7:c0:b8:8e:75:22:67:
e4:27:bb:b3:4f:e0:9b:b3:09:32:77:26:c8:41:75:6b:86:33:
95:4c:74:52:53:32:fa:58:14:96:ac:85:01:8d:2a:4d:f0:c3:
6b:31:fd:37:d5:95:07:b8:9f:f0:67:17:2c:c3:62:52:15:5b:
9f:d8:36:b7:6b:40:dd:7c:ce:ee:7e:bd:80:f4:28:49:5f:e6:
08:e5:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:40 2025 by rpki-client