Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: XRe9Ka8Pg7A5ft1RmnhLU7sJxfPQifvrCUs68OyFj0w=
Subject key identifier: 2D:B1:D0:73:B1:CA:F7:E5:B1:1C:A9:D5:A9:33:C6:DA:95:58:5A:01
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 0197827BE666C9A019BA38EC9BE37BD4FF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1450
Signing time: Wed 18 Jun 2025 10:00:47 +0000
Manifest this update: Wed 18 Jun 2025 10:00:47 +0000
Manifest next update: Thu 19 Jun 2025 10:00:47 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: gKeQ7QvgKIBLzAqQsKMC9NWs4M/bF1ue/bRjK2EvLBk=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7b:e6:66:c9:a0:19:ba:38:ec:9b:e3:7b:d4:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Jun 18 10:00:47 2025 GMT
Not After : Jun 19 10:00:47 2025 GMT
Subject: CN=2db1d073b1caf7e5b11ca9d5a933c6da95585a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:a8:d8:08:f3:47:df:fd:25:43:e9:7e:f8:
20:83:08:38:b2:38:63:bb:ba:18:ad:83:89:46:20:
ae:4d:5f:ca:d7:e5:7b:28:01:c6:f3:2b:35:4f:ea:
53:be:d3:c5:33:76:8a:05:d3:e1:61:49:3b:f7:2d:
5c:f7:bc:21:8d:5d:d6:19:b6:f9:c3:d7:20:d7:f5:
21:fd:f1:8c:d1:d6:9e:bb:bd:3e:49:79:67:9e:70:
ae:1f:1c:19:8c:21:8c:f9:97:59:54:76:1a:f2:f2:
88:bb:27:e9:a0:11:9f:2f:19:9f:81:67:31:f7:ce:
f7:a1:f7:35:77:b2:cc:b8:ca:7f:0f:cf:69:3b:b7:
fe:28:40:90:06:3a:56:61:18:f6:b6:1a:a7:36:3f:
e0:b2:dd:e0:67:b1:64:e5:e0:6e:95:cc:ff:c0:83:
ad:7e:87:52:82:be:1e:db:64:9a:1c:f3:1b:16:e3:
cd:ea:e6:0b:ed:ec:a7:ec:8e:47:a8:44:5a:87:4d:
58:cf:39:6b:c5:db:dd:e4:b9:cd:4e:e5:a2:ba:4d:
bd:ce:1f:78:cf:be:8f:7b:08:17:19:d2:fd:f6:6b:
d1:28:97:5a:bd:17:38:2d:6f:73:ae:8b:b3:89:7d:
de:78:12:1e:74:72:e1:55:f0:34:49:30:ff:f2:69:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:D0:73:B1:CA:F7:E5:B1:1C:A9:D5:A9:33:C6:DA:95:58:5A:01
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4a:80:a2:d5:e4:84:6d:ac:de:66:94:2c:23:1a:cd:a0:a6:
66:ed:ec:54:82:12:3f:5c:0e:70:48:da:d1:00:9b:b6:d7:06:
7b:07:f9:99:16:58:f9:bd:69:e8:c9:ba:97:ee:c3:a1:a2:00:
25:77:93:dd:b1:bf:fc:ce:2d:60:be:47:14:72:58:6f:fe:a3:
da:f8:74:fd:fe:84:78:7c:19:06:9b:9f:e9:03:23:85:80:cb:
c3:99:d4:7d:f0:bd:f4:76:bb:57:0e:d5:8e:27:a3:a1:62:08:
28:aa:38:ce:02:eb:60:00:37:2e:90:24:ea:de:9b:51:31:43:
5f:58:8c:4e:5e:07:db:cf:e7:b7:19:2b:7e:f0:08:04:0e:6c:
21:36:7f:fb:92:d7:b4:56:81:2c:01:47:27:36:ef:de:ee:88:
f0:1d:50:64:2d:cd:5b:89:c3:3d:e1:97:e3:eb:51:8b:99:11:
1b:7e:3b:fb:62:31:05:7e:19:76:15:42:67:ff:0e:e9:8c:68:
56:ed:db:be:49:d1:90:32:52:3c:c6:04:6e:57:08:81:29:39:
27:46:92:4b:e1:8d:48:2b:24:93:80:15:97:a1:71:65:0a:44:
08:42:e1:15:42:2b:98:46:ca:30:d7:d7:17:53:88:a5:58:1e:
c6:13:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:13:09 2025 by rpki-client