Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: 4KX8P2I5q0HaqbW1W2y2H5UCvOt8++DtytqP6fOghPk=
Subject key identifier: 60:47:A5:BE:3F:F2:DA:D5:71:BD:62:65:F1:C5:AA:7F:B2:FC:43:C6
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 0197B77C18F04BD5C5B49689C4C58E5E6CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: wqS2HLuShkz/D+RFy56gPxcy6b7Jn5cc2ZGQuHtxEL8=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:18:f0:4b:d5:c5:b4:96:89:c4:c5:8e:5e:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=6047a5be3ff2dad571bd6265f1c5aa7fb2fc43c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:d6:80:81:da:fa:71:07:75:c4:be:c4:cf:
fa:2e:4f:27:df:bb:65:40:db:5c:70:ba:33:19:3d:
82:f2:98:fa:5a:27:26:8f:c7:5c:e4:86:96:44:b1:
51:4c:b8:a2:a9:6e:37:91:df:f4:2e:6a:d6:e4:82:
a5:86:51:cd:8e:5a:40:c8:3e:97:66:f4:1e:86:60:
22:ea:d3:9e:0f:7c:9c:52:93:d1:65:52:ba:c0:b8:
4a:36:2f:a4:55:17:3c:69:d5:a1:8e:6a:72:3b:ae:
49:05:3d:5a:1c:51:d0:d0:3b:a6:57:56:ee:9f:b6:
26:0d:6d:34:5a:97:9e:b3:f9:8b:49:14:f5:e3:c0:
5a:ac:08:2b:56:ed:85:3b:48:74:27:ed:83:f1:b9:
bd:75:ef:c0:b9:6c:ae:5c:2f:d2:2d:72:e5:df:fe:
3a:07:5f:05:94:32:85:1a:11:72:d5:57:b3:5b:41:
31:db:2c:a1:0c:0a:f9:91:86:d8:ab:50:ac:12:06:
e6:fa:96:85:37:08:18:84:01:47:57:3d:f7:f8:da:
e4:71:be:49:1e:b4:c1:20:a9:35:f8:12:56:b9:de:
b3:02:09:df:42:28:23:08:be:7c:55:92:30:23:a5:
04:1d:f5:8f:d4:bb:23:10:08:02:2c:61:82:02:bd:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:A5:BE:3F:F2:DA:D5:71:BD:62:65:F1:C5:AA:7F:B2:FC:43:C6
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:eb:c0:49:c6:71:a7:0b:c9:b3:14:34:54:62:e3:25:58:
ea:55:9a:c8:58:6c:80:04:c9:77:f7:51:9f:c4:3a:47:35:3a:
bb:b4:84:f0:d1:57:01:c4:6a:f1:3e:9f:df:71:71:48:ff:35:
b9:ab:bd:21:b6:a2:18:3a:fa:5a:b8:d7:22:41:cf:3c:99:c9:
d7:07:93:c6:32:94:81:5b:7b:9d:2e:57:80:14:44:60:43:ab:
f3:48:c5:20:cc:a5:44:0a:56:7e:b5:25:00:79:56:15:a5:b0:
5a:36:23:b9:4c:73:04:1b:c9:15:5b:5b:3d:57:b7:c7:cf:6d:
49:75:e3:7f:89:4e:ed:f0:ce:5e:b6:8f:1c:c1:6e:fb:43:1e:
af:ff:c7:65:ec:af:38:a7:93:09:fb:46:ea:01:9a:4e:7b:d8:
1e:ee:a4:94:ae:ca:50:ad:75:42:0c:80:47:b0:e3:8c:38:fc:
a5:9e:63:e1:1f:14:62:27:db:3d:d2:51:56:9f:5f:df:cf:57:
91:08:4b:e0:f0:e2:9c:96:34:79:ac:6b:4a:4b:4d:f5:03:5c:
74:fe:ba:ab:ca:9a:af:23:b8:45:e7:d6:ce:55:57:d3:a9:3b:
13:84:fe:57:cd:84:0c:79:7c:c4:e0:fb:9d:ab:32:92:31:c7:
a1:6a:dd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client