Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: viJHvVmhx4AEcG9JTUxefi8dXdrRuB/fTFRTLwT71v8=
Subject key identifier: DE:38:07:4B:43:25:11:49:29:64:61:48:8A:C6:03:1F:67:F4:0B:81
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 0197B70E792037DCADA2B241DC45CF90709A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 05F9
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: 5ZDhRxZab0EpbJQHQ5P4z9NJPu9WhyebYwLKSgo+PfA=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:79:20:37:dc:ad:a2:b2:41:dc:45:cf:90:70:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=de38074b43251149296461488ac6031f67f40b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:bf:96:4d:28:60:0d:5d:fd:a9:fb:b5:90:
bd:24:60:dc:8d:d0:e4:9a:a1:10:6d:a2:62:bc:5b:
4a:11:b6:e0:b9:ad:22:9a:c7:02:a1:38:63:28:fd:
54:83:c0:fb:8e:96:c0:78:34:55:28:f3:7b:87:21:
c3:20:5f:70:18:6e:a5:8a:1c:8d:2c:9c:5a:2f:18:
5e:5a:4f:2d:9f:f0:b8:4d:38:eb:7e:3b:da:63:7b:
c0:8f:eb:9f:fc:8a:4f:41:41:5e:76:f8:4c:cd:d5:
8b:7a:4d:89:c4:8e:ad:4b:f3:8b:08:c4:90:c1:1b:
50:24:17:e6:6b:50:88:c8:71:69:60:b6:75:14:5d:
cd:0d:b3:8f:33:4e:9b:97:c7:df:91:a0:e4:01:42:
25:07:e4:d7:b2:fd:b0:70:3e:67:3c:0e:32:0e:2c:
9c:5d:22:ff:a0:b5:bf:9b:f6:ef:0e:55:66:60:c5:
28:75:0f:f4:72:6e:e5:ef:72:bb:f4:b0:6d:d9:9c:
c0:77:93:36:4a:a5:13:72:0f:91:e7:73:e1:1c:66:
21:d5:da:bf:82:8a:0c:fc:2b:f8:a8:90:63:61:ba:
0b:34:2e:3c:54:0a:a6:2b:24:00:08:d1:c1:f1:f0:
9e:45:c3:a1:a8:ee:8e:6d:8f:91:00:93:88:ac:1f:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:07:4B:43:25:11:49:29:64:61:48:8A:C6:03:1F:67:F4:0B:81
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:bc:5c:2d:c1:68:80:86:fa:e9:72:7f:f4:9d:27:66:dd:
67:28:bc:34:dd:89:03:51:ea:ae:4a:77:42:9b:74:ba:b9:4a:
09:19:59:ef:0f:44:3d:3b:92:d8:d8:5f:10:1b:11:71:6c:bf:
7e:0d:87:70:09:9d:93:65:74:d2:e5:e8:1e:68:05:4e:b1:5a:
c3:b5:2d:63:83:90:02:95:47:29:ed:ab:2c:21:55:9f:84:42:
cc:04:b4:10:52:6c:09:03:4f:f2:33:d5:a8:bd:d0:f9:a2:22:
6c:e0:aa:e8:35:83:1c:93:17:1b:a5:15:87:4c:17:71:c3:ae:
8e:59:13:75:15:de:f2:0d:47:8b:ad:57:93:2d:e1:74:4a:35:
fa:e0:d5:0f:3a:86:65:d3:93:49:f2:22:ef:50:91:ce:9d:3a:
81:af:46:53:8d:4e:fa:25:b6:a4:b3:6b:fb:6a:87:4e:55:a5:
01:13:27:95:33:15:e5:50:dc:03:d0:b1:f8:47:43:be:dd:e7:
7d:e9:3c:d4:f1:3d:59:a8:6d:01:8c:2f:f0:d6:27:ec:31:b2:
39:53:8a:fb:d4:ca:20:c3:f1:0f:38:eb:4a:39:dc:fe:e3:b5:
81:c0:19:09:c1:87:72:4f:f9:a7:0e:5d:d4:cd:ce:73:8e:b6:
09:cd:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:47 2025 by rpki-client