Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: rbpFZir/BddcH3rB6zMGAuKXQHwoCCXj/DzxYWICIZQ=
Subject key identifier: FD:F0:63:67:E3:46:87:45:F6:9B:60:1B:7D:FA:3B:9D:34:0A:55:FF
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 0197B70ED45B56CC160984A8CAA64D410AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: 5NSXO4REcyyKYWOQrLyGDTBjCSPRA6Z+7AR847BLcWE=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d4:5b:56:cc:16:09:84:a8:ca:a6:4d:41:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=fdf06367e3468745f69b601b7dfa3b9d340a55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:bf:db:26:62:c7:25:0a:bf:4e:b2:66:b6:
5f:72:67:41:80:bd:e2:0a:d5:99:4a:79:53:51:0c:
7e:55:c6:0c:1f:31:73:01:40:a2:7c:9e:37:b2:33:
35:07:72:96:31:bf:8f:00:48:fe:5b:e1:35:05:d1:
5e:9c:f7:ff:01:21:2e:32:ea:cf:e8:78:d8:c7:f2:
e3:5f:b1:ec:b8:80:57:4f:5f:b9:da:f2:b5:e5:ac:
b3:92:2c:9d:e8:e6:17:c0:1b:af:20:66:d8:de:e6:
25:46:e8:8c:f8:9a:7d:25:6f:03:79:ce:ca:52:6b:
4b:ab:b8:da:ba:a3:82:f4:af:7f:49:82:57:9e:f8:
a2:9c:16:98:3f:ad:4a:3e:75:1a:e1:dd:3a:e4:00:
89:a6:67:03:fc:ee:ed:13:da:e4:6c:f4:eb:76:bb:
03:6f:b9:e7:c7:63:9b:9e:68:d0:b6:e1:85:79:64:
60:27:fd:d4:d7:cb:db:cb:a9:e6:44:38:b9:77:75:
6c:d3:4d:45:c0:6d:03:e2:fa:e1:22:6e:b1:49:74:
49:dd:6b:1d:66:f3:2e:4b:2e:be:8f:d8:36:00:03:
42:e4:94:2b:f5:6d:87:9e:8b:8e:e6:ce:55:eb:10:
e0:7b:56:95:7d:6f:1e:05:87:a4:8f:82:4b:25:a0:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:63:67:E3:46:87:45:F6:9B:60:1B:7D:FA:3B:9D:34:0A:55:FF
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2c:76:eb:72:ce:ce:d3:db:72:6e:a1:42:73:29:33:54:dc:
46:f8:a8:c0:8b:4e:16:83:10:41:56:4e:4f:88:65:63:f6:e3:
d7:ec:91:6a:a7:5b:14:9c:7a:cc:a5:a4:4f:78:5e:f3:78:27:
fc:d3:c3:70:67:bf:75:e7:45:d9:b3:71:98:5a:2a:10:06:43:
2d:3b:8c:c2:ed:b3:8c:be:1c:bd:ee:16:d7:14:57:6a:e6:b7:
90:48:4e:fa:b4:a9:71:6a:ae:c6:2a:20:4b:18:dd:4c:a6:f9:
ae:c0:31:96:a1:0c:3e:db:93:06:b4:d5:5c:e1:00:bb:3e:0e:
54:89:72:c0:14:71:15:9d:c3:e4:40:ba:80:97:dc:69:16:48:
fb:39:05:a5:a4:91:b3:c8:21:ac:e3:5c:36:fc:da:8c:cf:3f:
5d:3d:e9:c5:4a:1e:b3:dd:b7:9d:20:ee:b5:97:06:f6:ff:57:
bb:84:3a:0c:01:e8:1c:8b:ab:fd:2b:2a:7a:ea:c9:b0:cb:f3:
fb:14:58:0a:bf:4f:41:ee:fc:80:6d:84:86:a6:76:87:7d:cc:
10:41:4e:19:6e:d5:ed:48:d2:3d:3a:32:37:43:e8:fd:7d:cc:
bc:ba:95:57:4b:b4:3b:85:49:c7:ff:d2:fe:48:d3:0b:fc:f3:
fa:5b:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:29 2025 by rpki-client