Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: ZTKqWY7qQ902pgZL9PuXKpGkfqCOFdsZbALNqgMe0iM=
Subject key identifier: 08:BF:98:C8:0D:DA:C6:62:19:88:9A:0B:BF:88:A9:49:7B:CF:CA:87
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019768BBEF8BA6BE09D97D17065E335C9F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0CFC
Signing time: Fri 13 Jun 2025 10:00:36 +0000
Manifest this update: Fri 13 Jun 2025 10:00:36 +0000
Manifest next update: Sat 14 Jun 2025 10:00:36 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: MMwC5hMeYgxKcZkBfAzm6EUZxJrGIu2ekWP+eL99vag=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ef:8b:a6:be:09:d9:7d:17:06:5e:33:5c:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jun 13 10:00:36 2025 GMT
Not After : Jun 14 10:00:36 2025 GMT
Subject: CN=08bf98c80ddac66219889a0bbf88a9497bcfca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:d6:99:b0:b6:95:9e:57:f5:b9:91:2e:e0:
ac:4e:44:09:77:40:e0:7a:3a:94:d8:d9:de:7c:81:
7e:8b:da:16:2d:06:66:98:bd:23:ef:65:e8:58:f7:
05:31:23:2f:33:ed:e5:13:44:84:63:cc:4a:63:11:
5b:9a:c8:3c:64:48:69:26:17:4a:b9:12:79:57:7c:
56:9f:74:8b:e0:aa:0d:d4:25:ec:05:7f:0a:25:2c:
ff:ab:4f:58:81:1f:3f:15:6c:30:53:34:fc:36:90:
d2:de:8c:a9:ad:79:78:70:07:59:9c:56:b7:43:18:
65:e3:25:8b:43:ae:b5:6e:e7:9c:af:c7:4e:83:ee:
df:a2:11:98:55:ee:1d:2d:1e:00:e6:5a:3f:2a:49:
8c:ca:44:bc:49:c2:c3:f6:9d:b4:f1:05:a9:65:2c:
e7:39:3f:3f:13:aa:f4:cc:48:b1:52:2d:3c:ad:eb:
86:fa:c0:40:17:1c:c4:41:0c:35:bb:af:a8:c3:49:
f9:f2:16:85:48:19:d1:13:95:c8:4c:89:8d:86:dd:
ba:ad:ed:b7:33:54:ea:dc:6b:8d:ab:56:fb:c3:87:
72:46:ed:97:e7:c0:4d:df:f6:58:e3:2f:5b:5e:8e:
be:4b:30:83:8e:73:2c:63:f6:9f:29:56:1b:e0:85:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:98:C8:0D:DA:C6:62:19:88:9A:0B:BF:88:A9:49:7B:CF:CA:87
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:45:bd:57:6c:42:97:fc:7e:25:a2:76:e7:4d:b9:98:38:
80:01:d4:b1:a2:f9:70:5e:88:fc:bc:b6:51:bd:10:5a:24:f5:
db:78:ed:59:74:13:03:d3:f3:40:f4:db:64:82:89:12:1e:83:
09:1c:e3:01:47:24:c9:37:c9:0e:a5:a2:b7:75:71:8e:2c:a3:
df:f7:d5:b7:1f:8b:9c:fc:98:fe:2e:19:9e:ec:c8:54:4b:f6:
e3:bc:56:7f:d2:10:c4:89:85:b5:96:89:c1:2a:16:7e:c8:28:
bd:6d:27:90:52:ff:a6:b6:2f:40:3a:8e:f8:c8:64:d4:cb:9a:
86:99:22:34:ba:e3:cb:a3:67:5e:63:71:29:66:12:ba:e5:bc:
5a:9b:67:28:bd:a8:a2:f8:48:eb:aa:35:64:ca:11:5b:68:2a:
56:2a:d1:70:82:0e:61:8d:78:32:e7:50:85:0b:f3:ae:6e:0d:
e6:61:6e:91:83:8d:fd:9a:70:e7:ba:cf:98:89:70:97:3e:05:
32:a0:c3:c0:76:33:25:e2:ba:76:f0:25:bb:25:58:ec:37:54:
28:f6:7c:f4:6e:ec:45:5a:14:cf:6b:1d:6e:ad:38:1c:51:63:
c7:54:da:b0:6c:e6:e0:29:6d:c2:8b:d7:1d:b6:8b:d5:79:6c:
52:51:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:46 2025 by rpki-client