Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: iNLsafK3EmSIUoH0OqtxT1o0WEWpt/uh8s/OUfKb+bI=
Subject key identifier: 7E:7B:01:D4:37:97:2C:36:DC:EF:85:A2:E6:5B:D2:E0:17:3A:34:78
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 0197771C7A52812AA682D23A0E3943872EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 13C7
Signing time: Mon 16 Jun 2025 05:00:44 +0000
Manifest this update: Mon 16 Jun 2025 05:00:44 +0000
Manifest next update: Tue 17 Jun 2025 05:00:44 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: yW1uPkBb5GSbFX2ne8vScEADVbAkgU7x6KBOcSbdhpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:7a:52:81:2a:a6:82:d2:3a:0e:39:43:87:2e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Jun 16 05:00:44 2025 GMT
Not After : Jun 17 05:00:44 2025 GMT
Subject: CN=7e7b01d437972c36dcef85a2e65bd2e0173a3478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:41:4f:ef:56:41:95:6b:51:51:2d:ae:17:
c7:e7:10:07:88:d1:81:78:b4:6e:e1:9a:72:63:4f:
b9:f5:e5:f8:da:64:82:35:ff:62:c3:5e:20:94:05:
64:5e:f2:a8:ff:1d:57:23:b7:ea:f7:03:cb:e9:62:
4a:04:d7:fb:c0:d8:97:31:6e:b9:c3:45:8d:69:2e:
db:a9:30:f9:26:da:54:c3:63:67:c2:37:40:93:f7:
09:97:77:b4:6b:73:04:c0:60:f5:33:08:76:26:7b:
f3:a8:ce:d0:83:54:70:fa:15:fe:7e:da:42:e1:be:
fa:53:a2:bb:19:fb:86:e2:ca:5e:eb:88:54:08:2a:
d9:75:6d:23:ea:fa:b4:47:a9:0d:27:bf:5c:86:27:
a9:25:9d:a4:d4:e2:6b:f0:ca:5d:ff:ee:3f:0c:c3:
36:c5:02:f5:f4:ca:99:97:88:44:e6:7d:69:12:28:
5d:4c:ed:8e:31:a3:88:90:4f:ec:13:19:ed:ba:23:
72:dd:6c:0d:3c:43:46:73:69:aa:99:94:c2:73:e8:
fd:c3:15:3e:1b:73:c8:2f:e7:e1:94:93:2c:df:ba:
59:83:22:1f:ab:15:3a:c3:77:c5:1d:4f:44:f7:41:
d7:d0:1f:b8:15:6b:e6:a4:40:9b:5c:9c:45:7f:16:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:01:D4:37:97:2C:36:DC:EF:85:A2:E6:5B:D2:E0:17:3A:34:78
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:f9:95:a9:42:71:06:d7:28:d2:82:d9:cc:f9:8b:aa:13:
be:4b:80:b7:74:fb:b1:55:26:cb:a7:bf:70:2b:74:0b:16:1b:
00:fa:95:4d:eb:55:cf:69:8b:20:41:77:ff:6d:a0:73:6d:f2:
2c:38:e6:7f:0b:90:a3:1a:14:61:e2:b0:14:b1:98:15:77:41:
50:ce:7b:b8:69:90:ca:19:57:0c:4e:c5:c1:2d:27:08:d5:f0:
6f:57:86:05:6e:3b:18:17:48:25:33:46:97:92:61:97:ad:06:
e7:14:a9:6d:00:20:4a:0e:05:56:c8:2b:74:2b:cc:c6:2b:f8:
0c:44:75:8b:ee:74:21:8b:5f:84:d7:28:a6:27:ea:ad:63:38:
f0:b6:8c:b5:71:d3:12:9c:5f:5a:25:4c:16:16:6e:a5:ba:b0:
a1:a0:a8:c0:6f:06:4c:18:7b:c1:a7:6c:10:f9:fe:36:3b:81:
be:45:f4:fe:72:16:7c:89:ae:ce:fa:41:b2:e9:4a:4e:54:e0:
87:bf:c9:93:c6:76:bb:e1:d6:9f:e5:4e:9e:fd:03:9d:28:34:
d8:e6:a9:30:18:20:29:2b:59:2c:ff:8c:60:db:29:8d:4b:e1:
15:d6:89:2c:3a:ef:a6:83:eb:6b:cc:51:61:18:65:84:46:11:
36:af:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:49:22 2025 by rpki-client