Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: ZmCMoaZ7QCw815k3K2FDAv+BNFz7mH7UTq4GiL3y4Eo=
Subject key identifier: 0C:2D:EE:3C:84:9D:6D:4B:E3:9C:78:59:FB:EA:81:10:5C:BF:C6:57
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 0197B77CB6F9A155C1E1FEC473BDEA74C036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0D8A
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: 5NsHemJrBrXjSf4Cj033SZOowNVFTo0TMjkclMCVLCw=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b6:f9:a1:55:c1:e1:fe:c4:73:bd:ea:74:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=0c2dee3c849d6d4be39c7859fbea81105cbfc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:cc:59:a6:05:ca:71:f6:f6:61:d1:cc:33:
be:89:22:76:db:37:9b:b0:97:f8:3d:9f:41:36:78:
bd:d5:47:d2:85:0e:a7:1f:8d:cc:d5:be:9a:8f:0a:
b8:c5:e7:86:ee:91:b9:96:2f:5a:a8:9f:17:4f:8d:
47:21:c6:e8:77:71:e0:90:dd:96:70:95:67:bb:a7:
22:c7:46:9e:cb:29:31:f0:6d:0e:ca:56:24:09:33:
28:95:53:89:ea:d8:1d:af:99:f8:35:8a:9a:48:a9:
65:d2:fc:ce:3c:6a:e2:d1:7b:6c:04:71:b6:90:92:
bb:c5:4f:1f:4c:0b:91:0e:72:83:3b:19:1b:42:bc:
94:25:d6:ea:df:a5:f3:2a:2a:04:fb:d0:72:77:40:
9d:58:8a:2f:91:e9:48:35:a4:2e:08:55:11:6a:0d:
ef:5c:17:58:8c:81:b5:f2:12:7f:b3:14:b9:bc:fe:
46:bd:9a:94:88:45:62:f9:72:32:93:ed:ea:8a:da:
a4:ad:f0:3b:9c:1d:56:a2:a1:19:25:4d:bb:b8:c3:
fd:98:fb:5f:6e:c4:c5:4e:47:d6:11:a7:23:fa:2e:
80:d3:1f:48:0b:bc:c4:47:57:fb:c8:d2:d7:85:1b:
71:d4:f2:64:8e:bc:16:39:c2:0d:e9:63:e6:d3:41:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:EE:3C:84:9D:6D:4B:E3:9C:78:59:FB:EA:81:10:5C:BF:C6:57
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f5:e7:71:b2:d9:c4:15:fd:b7:0d:91:f6:24:06:1b:f2:fe:
09:e8:26:01:2b:7a:d4:e2:cb:35:b2:94:33:fc:4e:55:ba:fa:
d4:4f:b3:e1:73:bc:13:dd:07:13:ad:be:f7:2e:a7:bb:74:40:
16:f4:07:d3:cc:de:c4:c3:78:c7:8b:eb:54:18:fd:e7:06:2b:
cb:95:d8:d3:45:90:09:43:48:54:0c:a7:9f:32:eb:45:ec:5e:
97:25:9b:70:8c:7c:74:80:38:c0:e7:62:57:1e:80:eb:b5:61:
46:81:7a:43:0a:67:f9:96:66:fc:1e:cf:53:ce:7c:b3:ca:12:
16:5d:e7:e0:09:69:7e:e7:de:a5:04:7c:56:74:81:c9:49:eb:
fc:c4:f3:5a:0d:f9:ac:ef:13:74:3c:c5:a2:86:cb:ac:10:65:
bc:db:b5:c4:1f:35:85:4a:04:a0:ad:4f:d0:d6:ba:49:c9:cd:
6b:d5:a5:58:84:23:82:f0:27:3f:84:e2:fc:ed:3c:3d:ff:22:
a2:aa:fd:ad:0e:ca:fc:f6:53:1d:47:f6:63:5f:fb:31:65:01:
ec:a2:44:15:f7:93:4d:30:23:81:50:9e:f0:0a:00:62:bf:0d:
43:c6:38:2b:ad:ff:b9:64:bd:02:08:28:a6:4d:48:02:71:80:
3a:9b:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:29 2025 by rpki-client