Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: v0wFtpBAaLGyX6FWyhbqqkq4q+nfYNmtyR7NOcHuLaI=
Subject key identifier: 75:92:7A:D5:CD:9F:61:8B:2C:26:21:B3:97:04:91:4D:91:AC:96:A4
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019770AC868FB98785F5C003C8E380AD8BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0424
Signing time: Sat 14 Jun 2025 23:00:44 +0000
Manifest this update: Sat 14 Jun 2025 23:00:44 +0000
Manifest next update: Sun 15 Jun 2025 23:00:44 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: GVgg/OMLHAXBOcZRvtSjENDd3wl1mwO0+04uKbCcfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:86:8f:b9:87:85:f5:c0:03:c8:e3:80:ad:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jun 14 23:00:44 2025 GMT
Not After : Jun 15 23:00:44 2025 GMT
Subject: CN=75927ad5cd9f618b2c2621b39704914d91ac96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:42:1c:0c:89:3c:31:11:9c:90:c5:d9:bf:
c3:1e:38:d9:61:41:3a:27:23:be:72:a4:e6:58:8f:
dc:97:1f:97:92:c3:76:5e:3c:32:b5:02:e5:d9:ef:
38:ff:29:32:86:75:ee:16:35:d5:dc:8d:f4:bb:c2:
78:31:0b:ab:f4:b9:7d:d9:71:7e:6b:4f:07:70:64:
d2:8a:66:83:46:43:34:c1:13:e0:be:bb:d3:33:88:
a3:f6:6b:7b:1e:d7:9b:22:74:f8:84:07:1b:00:45:
52:a3:cb:0a:db:12:a8:a5:6f:91:7f:30:5b:2b:44:
6c:09:b4:58:f6:d6:9d:10:45:1c:e6:55:7f:54:89:
47:67:f4:2e:02:f6:58:fa:af:7a:a4:ee:f5:80:83:
4c:55:e6:ee:a2:58:55:2f:73:79:1d:f2:e0:df:eb:
45:7e:2b:4d:33:7e:9a:13:6e:75:4a:97:55:bf:9f:
60:eb:63:c2:e1:ce:e3:b5:71:c5:bd:b4:c1:e4:2c:
c5:ac:de:b7:9a:d6:59:7b:36:2a:be:26:ad:f6:48:
04:83:a8:66:31:2b:bd:6f:35:c7:2f:9c:0b:37:10:
2a:28:96:1a:06:a1:9e:d7:c5:6f:5c:dd:47:a2:2f:
e2:fb:3a:24:44:30:44:24:cd:c6:5e:b6:d9:98:f2:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:92:7A:D5:CD:9F:61:8B:2C:26:21:B3:97:04:91:4D:91:AC:96:A4
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:96:c9:7e:54:09:8a:dd:86:84:f2:0b:fb:e5:c4:1c:a9:
8c:b7:12:27:2e:62:44:f5:55:1d:5a:3f:30:e8:85:b5:1c:c2:
8e:fe:13:fc:07:49:33:8d:ef:7f:5a:03:d2:34:24:97:00:aa:
cb:66:0e:5d:14:32:19:28:f0:26:08:0d:2a:a4:b9:89:09:c0:
88:a9:93:b4:fe:5a:62:67:4e:a6:7c:13:14:8b:f4:70:ab:7b:
44:d3:74:5e:db:aa:a8:0e:8a:22:17:47:79:db:8d:9d:9b:39:
8e:ec:a5:56:4b:4d:ea:25:79:0d:89:be:4a:f8:02:2a:5c:fc:
61:e1:19:3e:31:7c:17:3b:b2:f9:f8:b7:5f:12:4f:ea:f9:28:
94:33:7b:41:95:06:3a:d5:ce:94:cc:a9:74:95:af:15:20:47:
41:e4:3f:5b:25:77:77:7d:7f:20:7a:a9:45:99:8a:36:6b:8c:
8b:d2:d9:75:43:2d:9a:0d:59:3a:b2:ac:b3:66:9f:54:2f:e7:
02:85:a4:94:7b:aa:07:f9:6d:e0:81:36:19:62:3b:c6:0f:67:
d7:c5:80:9e:ee:e5:e3:9b:ac:76:79:96:41:a8:e3:f3:6b:bb:
12:fe:9a:bb:60:f3:da:ed:94:6f:d4:cb:7c:f4:38:3b:39:66:
96:8f:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:51 2025 by rpki-client