Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 2iWPiU5wTFX659wkGHecFK/JpqmrTDSz2HvLm8+0K0E=
Subject key identifier: 34:4F:AB:C4:CE:28:D5:F0:25:A4:13:99:C1:05:C6:13:A3:6A:C3:34
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 0197B632CDD00901FA47B5DE64667688D0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0422
Signing time: Sat 28 Jun 2025 11:01:12 +0000
Manifest this update: Sat 28 Jun 2025 11:01:12 +0000
Manifest next update: Sun 29 Jun 2025 11:01:12 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: D3QY5I5raXzwhvhYYV+mPC/7HKMBe0w1oXVMU0KsNno=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:cd:d0:09:01:fa:47:b5:de:64:66:76:88:d0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jun 28 11:01:12 2025 GMT
Not After : Jun 29 11:01:12 2025 GMT
Subject: CN=344fabc4ce28d5f025a41399c105c613a36ac334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:94:31:8e:e5:fc:b6:af:32:96:5e:ee:99:
f4:08:63:5e:04:c1:b4:73:57:54:7b:4f:21:8d:c0:
93:c8:70:de:5c:3b:c6:2f:77:b2:93:a4:c7:73:60:
d8:cf:93:a8:a9:60:f7:eb:50:64:2a:26:9c:d7:8b:
ab:ab:2b:8b:72:19:c0:ae:14:5d:68:71:81:de:c6:
f3:9f:31:15:21:e8:f8:09:8d:27:bc:83:78:58:87:
cd:02:35:b0:9e:ad:bb:21:f8:1f:e6:c1:4c:a4:e1:
85:24:d2:99:ef:82:85:2f:c4:4e:c1:60:97:1b:7b:
c4:86:29:bc:5f:a5:f4:c3:81:b5:72:01:fb:64:8e:
74:e6:6b:1c:a1:74:da:86:67:93:fc:36:81:f6:81:
21:2e:a7:5c:ea:37:33:17:77:3f:d4:25:d8:e9:f8:
5e:f4:7e:11:87:ed:ed:0c:0a:49:b0:ac:f2:6d:e3:
11:5a:6b:9a:6b:ac:30:9d:73:b8:1d:60:22:d9:d0:
a4:87:af:6b:b1:5c:71:a5:2f:ba:d7:87:99:e6:3e:
d6:04:3e:d4:56:f5:e4:61:27:9f:69:c5:9f:31:91:
6b:e0:8e:03:b4:36:aa:58:d1:63:d0:7b:6b:1d:35:
c5:d1:de:b2:d8:e1:c1:37:1d:6a:5c:70:38:e6:66:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:AB:C4:CE:28:D5:F0:25:A4:13:99:C1:05:C6:13:A3:6A:C3:34
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:e2:c0:72:a8:cc:c8:e6:55:3a:7a:06:4c:23:7b:05:37:
63:b3:fe:df:e3:6f:2b:1f:cb:33:29:4d:45:82:8e:c9:a7:e3:
ea:58:5d:93:bf:ec:05:be:b1:f1:02:3d:7c:3d:24:73:b8:17:
66:5a:93:11:4c:26:56:e8:b5:83:59:a8:37:6c:dd:6a:2d:df:
40:3a:1b:2b:46:5c:c3:e6:29:f4:3f:ca:20:c8:43:ec:b1:90:
87:3a:9f:ec:4a:67:9a:e1:45:84:34:18:8a:2c:de:85:dd:63:
f3:66:2a:8f:1b:d5:6b:22:52:51:fc:37:f7:b9:e2:b4:c2:15:
65:b0:8e:33:38:58:85:f2:a3:fc:60:0e:f0:76:12:7c:05:a8:
44:d1:1e:d9:1b:06:d5:75:11:84:9d:00:28:1d:f6:f0:9c:8e:
27:89:80:c2:4a:30:9f:0b:3b:6e:83:0a:3f:3f:ef:70:80:3d:
15:70:82:a5:63:25:8f:0c:33:bd:69:4b:01:e2:9d:42:e3:30:
e9:49:a4:5a:c1:da:65:f7:4c:18:e8:6b:bf:79:d7:80:37:30:
f9:07:6f:7f:79:5b:6b:45:13:67:29:a0:d7:64:d0:43:c2:58:
03:90:63:91:87:ec:78:f8:2c:7e:b8:b5:af:70:2a:a5:60:1e:
e0:81:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:14 2025 by rpki-client