Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: n4EOZVZgnAse7CzLLX/Qc0tR55iiB1L5JI8hhKV9lNQ=
Subject key identifier: CD:FD:9C:7D:7A:33:54:78:A2:E8:17:21:24:FB:90:57:8F:6A:4F:D7
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01977F0D6D6CBD66C066342AF201C26DAF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 1295
Signing time: Tue 17 Jun 2025 18:01:15 +0000
Manifest this update: Tue 17 Jun 2025 18:01:15 +0000
Manifest next update: Wed 18 Jun 2025 18:01:15 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: 0xzZ9KdLsVQTsF1ietWlRbSfgQUrkV5d+gs+XEX+tTg=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:6d:6c:bd:66:c0:66:34:2a:f2:01:c2:6d:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jun 17 18:01:15 2025 GMT
Not After : Jun 18 18:01:15 2025 GMT
Subject: CN=cdfd9c7d7a335478a2e8172124fb90578f6a4fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:a4:0d:73:86:f5:e7:20:96:d6:fb:be:18:
82:49:09:23:34:e9:92:b7:e6:08:0f:c7:56:65:be:
0e:00:20:df:0c:4d:6e:0a:d2:05:72:31:4e:5b:2c:
74:04:36:78:fd:62:63:3b:1d:63:7b:86:09:51:b2:
de:50:35:16:9d:04:44:c2:09:0d:21:15:e4:fa:d5:
44:61:6d:ba:56:02:55:ff:2d:fa:a2:bd:84:bb:a4:
eb:73:2d:83:a4:ad:6f:70:53:4c:25:9b:cf:78:7d:
87:62:19:a1:51:e3:c0:50:b9:58:55:f9:7e:82:05:
03:bd:c4:37:dd:93:8d:97:63:b4:97:e5:60:d2:cf:
a5:30:44:25:5d:5e:52:2e:cf:37:b4:1b:ab:26:d0:
2c:b6:c1:dd:92:3c:d3:d5:78:19:c0:3a:75:ff:b4:
73:91:ed:d7:7c:70:37:ce:c4:ce:37:35:f7:b0:93:
62:72:04:48:68:84:21:8e:8d:37:e8:6d:c9:77:d3:
cd:5f:20:9b:79:28:12:9f:0f:96:78:f7:32:d2:9d:
05:80:56:a4:a0:57:a2:bd:e3:37:74:d8:62:0c:83:
2b:9d:11:68:68:0d:b2:90:83:6c:e8:f4:65:94:0f:
3f:b8:54:9d:e9:5a:3d:fc:13:a4:fd:13:5b:62:66:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:9C:7D:7A:33:54:78:A2:E8:17:21:24:FB:90:57:8F:6A:4F:D7
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2f:47:93:69:f0:68:7e:22:b7:aa:9a:d5:10:d0:ec:4c:7a:
ff:d4:2a:db:e4:cd:be:4f:40:0c:6d:cf:0e:6d:68:64:f6:f9:
51:26:81:36:fe:d5:ec:d4:61:ba:72:f7:b8:01:f3:fe:ea:08:
bc:79:e7:83:fd:41:ca:63:66:5b:1d:2e:83:ba:13:03:6b:b4:
01:f1:c9:ce:47:fa:e4:66:9d:a7:7a:5b:c6:64:22:12:64:76:
23:c2:2d:4a:ad:28:9e:1a:08:c3:82:19:37:b4:76:59:4e:41:
c8:1e:0a:07:ad:09:a3:26:a5:30:31:d8:22:06:32:f0:af:25:
a8:b4:21:7d:71:d2:d2:78:32:5a:42:4c:e2:9d:85:0e:5f:b6:
07:8b:e6:b0:72:72:43:34:55:30:9e:0b:cf:b8:aa:fd:64:e8:
72:b1:d2:a3:dc:f5:19:6e:52:ff:20:3b:33:7f:1b:a7:95:8b:
db:0d:e3:70:fc:fc:53:14:c1:b6:7f:89:ea:7d:3f:2b:93:10:
af:a0:cc:ce:26:c3:b5:1f:fa:f7:6e:ca:ad:8c:49:c2:43:9f:
db:dd:41:c3:8a:bf:cc:12:3b:a5:33:23:3f:82:df:6f:c7:57:
68:17:11:5f:af:c4:f8:2d:df:96:4f:7e:68:97:43:48:22:d4:
de:ab:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:06:52 2025 by rpki-client