Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: HSSlnA0tUYY8L8Rp+n6DG3J/rvebCkqJvE+hLgSGnc0=
Subject key identifier: 62:75:C0:DB:8A:4E:B4:2A:7D:36:CE:58:F1:F1:E5:AC:7D:29:96:9F
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019770ACB85601D28F190C8A7ECC7AE2404E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 23:00:56 +0000
Manifest this update: Sat 14 Jun 2025 23:00:56 +0000
Manifest next update: Sun 15 Jun 2025 23:00:56 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: npYxLpUYcOTtlLkzN8ULiGgC4fhBGFfjar73EzNa75g=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:b8:56:01:d2:8f:19:0c:8a:7e:cc:7a:e2:40:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jun 14 23:00:56 2025 GMT
Not After : Jun 15 23:00:56 2025 GMT
Subject: CN=6275c0db8a4eb42a7d36ce58f1f1e5ac7d29969f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:4f:64:be:51:32:70:d2:2c:e9:e7:33:de:
9a:1d:82:e0:86:58:ac:10:31:c2:3c:09:5e:26:2a:
98:af:10:89:f6:3a:ae:7e:0e:f0:31:3a:fd:b9:d6:
df:0d:45:04:36:6d:e3:d8:a8:89:d2:e5:dc:58:0a:
2d:da:29:4b:c8:54:94:7f:7c:a7:88:fc:4e:eb:76:
a7:78:a2:96:00:a6:d4:15:59:99:12:76:a2:5b:18:
cd:0d:0a:0b:27:7f:3e:a2:b1:14:40:0f:3c:6c:70:
8e:ed:e7:a2:38:0c:40:3b:64:74:47:3d:40:a6:e4:
48:1b:93:57:32:9d:17:48:81:71:1a:09:72:d8:e4:
70:09:7b:82:15:60:85:58:a9:1d:02:c3:05:39:fa:
04:7a:1f:57:56:0b:75:9c:20:df:cc:9f:ac:da:d0:
b8:1c:60:32:24:e3:f4:48:f6:15:0d:03:ba:4e:6b:
6d:dd:e3:2e:b1:28:99:b8:0d:64:6a:81:74:d4:32:
c4:11:6a:4a:19:d9:45:cc:0b:8e:a9:a7:f3:2f:89:
f6:43:c2:16:db:27:6f:41:ed:73:7f:72:fa:42:9d:
6e:cf:fe:20:84:0f:2f:9d:e8:86:e1:2d:dc:96:05:
b6:c6:52:ac:70:84:a1:18:09:91:ef:f6:18:26:51:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:C0:DB:8A:4E:B4:2A:7D:36:CE:58:F1:F1:E5:AC:7D:29:96:9F
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:68:78:5b:8d:dc:ad:f9:bf:21:ff:7d:fb:c1:fd:83:9f:
11:1b:6e:78:6f:90:60:77:42:d0:78:a9:ec:0f:ac:77:b0:63:
eb:a6:0b:e8:d7:7b:fe:7f:66:f5:3e:61:d7:98:19:b9:aa:82:
48:bb:c9:9d:bd:a7:c1:4d:b5:7f:4b:90:6a:fa:df:4a:3a:2f:
a6:16:6d:54:0c:6f:b2:10:e8:63:4d:b0:96:b6:7b:85:0a:b7:
a5:bd:c9:b0:1c:02:0e:b2:e3:c5:a8:b5:cd:9d:e6:21:62:85:
a1:96:15:70:0b:cc:1c:10:b4:c6:a6:49:b9:0d:23:8d:6a:c1:
d7:9f:20:6d:40:db:9a:ee:af:00:a2:60:d4:1f:7c:76:26:84:
4c:cd:44:a0:de:56:96:e3:c9:25:d9:df:60:1d:62:10:bf:55:
66:5e:4e:ef:f2:68:6f:a8:2e:9a:be:63:bc:a5:10:cd:03:cf:
e7:29:41:83:0e:df:d9:88:90:91:1b:14:da:1d:38:a4:50:58:
ad:6e:d5:ee:4e:c6:0c:0d:41:7d:b8:72:cb:b3:ed:31:0f:fc:
a5:9e:07:e3:1d:ee:1d:53:ae:fa:3c:2b:84:1f:19:26:28:62:
74:54:da:77:d7:ea:5e:21:ba:a9:9e:6d:c0:8e:e7:0f:02:dd:
e6:b7:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:13:41 2025 by rpki-client