Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: eqQCJUF0wMcD0Eeov91SQJJqaGf5bZ1xXzBKUiFgL/s=
Subject key identifier: F9:A3:08:75:F2:B4:75:C9:D0:2E:52:C1:03:7C:29:25:01:02:11:71
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 0197B70E4F987706A4CC90CFB01C11F3BEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: SYtfavA5emHxtrbo9VzXKYKqNJfGXnn7HQNKZHKxXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4f:98:77:06:a4:cc:90:cf:b0:1c:11:f3:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=f9a30875f2b475c9d02e52c1037c292501021171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:95:6e:30:48:c0:f5:05:17:37:52:8f:d3:
c3:34:ea:81:57:57:16:a4:b0:51:c6:04:d1:88:d3:
5f:a8:df:fc:7f:3c:cc:29:43:28:f9:a6:6a:79:0b:
b6:61:8c:14:be:bb:de:9c:80:5f:76:5e:21:df:89:
be:f8:09:3d:62:46:b1:6c:e4:fb:f9:d6:fa:65:62:
ab:d2:96:65:e5:80:33:38:66:b6:19:19:25:17:07:
ae:17:05:2e:ea:24:8c:ea:b1:02:b8:84:ea:71:1a:
4a:77:4d:e4:6b:16:df:c0:8d:a4:0f:9c:32:5c:c0:
81:63:22:b0:bf:3c:e6:57:ad:e4:46:ac:ab:ff:08:
75:2a:7b:48:17:9c:c0:a6:48:ef:c1:99:6f:51:e4:
7a:69:43:b6:fd:ea:3a:28:82:10:66:a3:ea:dd:08:
c8:a2:06:2a:89:c0:16:a5:81:2f:e0:8d:87:00:d6:
45:9f:a9:a6:e7:de:71:75:44:81:a2:53:40:7d:cc:
1f:5e:0d:68:b0:13:1a:c2:67:a7:29:82:d0:cf:0b:
c2:3a:60:92:16:15:31:a4:ad:b0:4a:71:be:fd:4a:
c9:aa:6e:7f:b4:b2:01:12:80:a4:be:08:6d:20:20:
13:f1:ef:6c:ff:1b:0e:5c:2a:52:22:a0:7f:9c:2f:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:08:75:F2:B4:75:C9:D0:2E:52:C1:03:7C:29:25:01:02:11:71
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:22:8c:94:e7:e3:3a:25:a3:0a:e9:3a:9a:c7:ed:d0:c5:76:
cd:eb:af:84:de:9b:52:c4:fb:ac:f1:9c:c6:88:c6:8e:22:b8:
63:0d:88:ce:44:ac:8b:0f:03:31:87:c7:28:da:14:79:68:bc:
ca:c4:61:a5:c2:1a:44:e6:52:b7:68:e1:c2:19:bd:d0:58:6e:
f9:41:28:76:53:c5:a1:ee:9f:19:b2:80:9d:bb:af:c3:1a:1a:
03:98:47:59:cf:7f:87:a8:bf:12:5c:cf:7e:76:50:3e:10:d5:
8d:20:e8:f7:b1:c1:40:59:89:1e:c2:a4:d2:6f:da:b8:9e:f3:
27:21:26:6d:c4:d5:f3:1f:07:07:25:5d:19:c1:10:18:43:c6:
71:10:4d:4b:50:9e:94:30:5d:46:35:06:20:a7:6a:fd:7f:35:
a4:0b:c0:eb:f0:fa:a0:28:09:c3:ac:12:c3:c3:ea:50:1a:bd:
38:12:7c:80:fb:5a:92:41:a8:25:3b:1b:e5:68:f9:64:0b:0a:
03:1c:9a:a1:3f:59:aa:ba:46:c2:a1:d3:cf:1f:b1:72:b3:45:
5f:8e:f5:e5:d6:68:fd:f8:db:28:62:6e:59:36:83:ca:f1:4f:
72:0b:1a:43:45:8c:97:b0:5b:9f:be:91:43:cc:80:b6:32:ce:
19:a5:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:29:00 2025 by rpki-client