Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: YqoH+YpWCgvAUHCKffcLxHsf57ohXRH2PHTw9b0pETk=
Subject key identifier: 2F:BB:71:FC:B3:75:02:5E:5B:1F:59:E7:46:0E:17:0E:B4:58:3D:11
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01976BF409D94D28A843B84D1EA548ADA7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 01:00:44 +0000
Manifest this update: Sat 14 Jun 2025 01:00:44 +0000
Manifest next update: Sun 15 Jun 2025 01:00:44 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: 59evgcMLeB5Q/WHrjmOgvJlU6DhWBhpm09+Gu0VZMMs=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:09:d9:4d:28:a8:43:b8:4d:1e:a5:48:ad:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jun 14 01:00:44 2025 GMT
Not After : Jun 15 01:00:44 2025 GMT
Subject: CN=2fbb71fcb375025e5b1f59e7460e170eb4583d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:76:3c:91:45:0a:75:ca:84:17:32:ea:d4:
d1:17:72:13:74:cd:31:b6:a2:67:8d:51:d5:e1:18:
8c:54:7d:d3:66:66:b0:1c:9c:dc:f5:89:6f:2c:01:
e1:ee:de:1d:b8:b0:d2:80:c0:83:ac:9e:2d:86:8f:
33:7c:25:4b:58:42:38:4e:b7:33:ec:ab:ee:83:49:
e1:5e:14:ed:09:40:82:d4:86:d3:7f:64:e0:38:aa:
4b:3e:c9:46:f0:9a:49:75:29:b2:65:df:42:a2:b0:
e7:10:6d:59:80:5c:fd:25:14:51:d9:76:f6:3b:bc:
f6:e3:9d:de:42:9f:34:46:dc:f3:e8:68:6e:0a:7f:
5f:c6:2b:99:cb:a7:4d:25:75:50:3b:d7:1e:a9:09:
c0:5d:70:26:01:43:f3:cc:b1:14:da:bf:c2:0d:71:
58:e0:e3:94:fb:60:7c:98:fc:52:65:08:47:71:a0:
d8:b3:22:40:d5:94:59:3a:c9:5e:a5:bd:58:60:cb:
9a:10:cc:e7:e7:e0:ed:27:41:93:58:1f:73:16:6a:
74:2d:0b:aa:00:83:92:bf:4f:1b:e0:5e:94:cf:88:
dd:26:96:a2:5a:19:43:6e:be:b4:59:15:9e:23:b8:
9e:4e:d7:fb:e5:7b:fd:88:25:87:65:5c:65:2b:f2:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:71:FC:B3:75:02:5E:5B:1F:59:E7:46:0E:17:0E:B4:58:3D:11
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0f:71:94:62:db:e0:26:a6:5e:12:48:32:85:49:2e:cd:fc:
36:4a:af:73:66:0c:53:66:e7:d1:c1:57:ea:72:04:58:11:79:
97:1e:c6:f8:d8:fc:5c:f8:10:6f:63:e4:2f:a4:c8:a1:88:b5:
72:76:c8:10:27:43:3e:3c:31:58:82:18:4c:b0:fc:41:f7:7c:
8d:94:f9:2e:cc:e7:b5:af:6d:35:3c:e6:62:b7:86:4d:55:d1:
65:8e:31:95:1e:05:6d:2e:95:da:21:b2:2a:1d:5b:17:83:5e:
8e:15:e8:bd:5b:49:50:89:d5:84:c4:a9:a3:9a:9f:63:4b:82:
ed:8b:c2:57:7f:7b:c7:7f:fe:17:24:4d:8a:f3:38:4b:cb:5a:
2c:ab:41:49:e2:31:3c:2c:19:23:84:cf:fe:5a:99:a2:e3:9f:
5a:4b:99:26:7d:a4:a8:c6:e0:f7:59:98:90:f9:c1:aa:65:0e:
8c:80:5b:40:de:89:7d:39:af:fc:4e:30:f9:e6:74:44:09:65:
46:7d:d7:5c:a4:fa:8e:15:17:2d:d6:4f:17:a5:13:96:51:94:
04:b2:9d:ce:ad:51:0a:e9:f3:b6:66:1a:10:21:62:91:ab:3c:
ff:77:84:e8:18:ad:2d:2b:2f:7b:9b:17:a2:c3:24:71:28:e9:
08:ad:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:01 2025 by rpki-client