Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: FqQ4nCHQqqIZRNrzULLAuaRAzVWCQC12GbGaJUHqKtQ=
Subject key identifier: C2:08:63:A5:95:AE:94:0E:C8:D9:BF:2F:42:3F:AD:5F:16:8C:F2:2D
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 0197C07F6AE3968CF869903D7B3490AD6BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0A69
Signing time: Mon 30 Jun 2025 11:01:05 +0000
Manifest this update: Mon 30 Jun 2025 11:01:05 +0000
Manifest next update: Tue 01 Jul 2025 11:01:05 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: ysMXko6ztnCSS1g3Pa+D3mkD9gb5xO7UGxQiydJ6r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:6a:e3:96:8c:f8:69:90:3d:7b:34:90:ad:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jun 30 11:01:05 2025 GMT
Not After : Jul 1 11:01:05 2025 GMT
Subject: CN=c20863a595ae940ec8d9bf2f423fad5f168cf22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:71:4e:3c:5a:6a:63:8b:49:6f:0d:d9:c5:
df:cb:be:a9:c7:e8:be:2e:94:68:28:ca:bb:1f:c7:
76:c7:f0:a2:4d:65:77:19:9e:7c:c4:cf:2d:09:5b:
fc:1e:42:80:8d:f8:79:a6:54:7b:2a:fa:60:51:44:
3b:d0:96:74:16:16:a4:d6:a1:cf:19:a3:97:48:51:
d4:3a:70:62:f1:37:a5:3e:40:24:99:12:83:c0:96:
55:54:22:a6:2f:cf:94:75:57:58:a7:87:73:5a:d1:
6d:00:20:9a:1d:a1:1c:78:f2:20:31:3b:89:8b:d6:
02:ed:23:33:6f:5e:e1:4c:fc:03:51:f9:02:92:51:
d3:41:e1:ec:a8:bf:e1:d1:65:43:01:ee:a7:2d:2a:
70:07:9d:28:43:7e:c2:c9:71:d4:6d:26:54:72:36:
94:48:1a:dd:9c:42:9c:95:14:c1:d4:1e:58:1e:32:
4a:69:a8:81:bc:3a:9b:76:f2:47:25:7b:e4:e1:ac:
7c:ee:5b:75:92:11:ff:0f:c4:c9:59:49:65:87:fd:
a0:52:62:4a:74:a0:c4:b3:45:15:32:0e:39:11:7f:
98:c4:39:ee:4e:fc:e9:66:c9:5e:12:fe:61:6f:dd:
22:8d:ec:8f:8c:fb:34:70:ce:2e:fc:7d:90:36:3d:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:63:A5:95:AE:94:0E:C8:D9:BF:2F:42:3F:AD:5F:16:8C:F2:2D
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:b9:3b:3e:a0:72:af:d4:ad:be:bc:bc:8e:53:2d:73:88:
c3:01:de:b5:e2:8d:a2:9a:6b:8d:94:55:81:6f:2e:6a:2c:1c:
39:a8:ee:ab:5e:3e:80:36:49:39:f4:7f:4b:04:2c:c1:cc:03:
8e:50:2a:08:5c:f9:fa:35:fc:c4:3e:7a:92:00:aa:ff:08:ee:
19:24:38:38:7f:83:17:3e:cb:44:60:a7:1d:1b:b7:9f:ad:ed:
63:f2:c9:ed:c6:a2:3a:ec:31:55:59:ee:33:a6:a3:1f:58:77:
5f:34:3e:51:58:ef:e1:d6:02:7d:c9:f7:9d:d1:73:11:34:6a:
75:97:5e:82:a7:c2:fb:61:e1:f8:20:a9:d7:ed:32:13:85:5b:
36:ea:09:cb:90:34:78:e9:8a:a1:21:ce:42:65:ab:fe:f0:1e:
67:9b:af:4b:fc:55:bc:4d:8b:72:b5:20:39:68:b1:62:6a:fc:
de:96:99:83:0c:f8:e3:6d:4b:12:d7:f3:c1:24:32:da:5c:31:
b9:04:29:30:37:cf:81:d8:20:55:8a:8e:eb:13:c5:af:8a:84:
01:b6:d7:cd:84:21:b5:1a:3c:ef:2c:d7:91:9b:40:06:d4:c9:
ed:b4:06:32:bf:4e:38:63:42:7e:b8:75:bb:b8:e0:1e:93:26:
57:7a:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:08:09 2025 by rpki-client