Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: OvoppPhhITZ3T8jPkU8p8YT/Fujcq+e7h7Rx0T6xQus=
Subject key identifier: 94:80:23:DE:CB:3E:17:75:31:51:50:D2:6C:B0:29:8A:DB:28:93:8F
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 0197778AA9F33ED408591DAEF060EB5D5869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0AEF
Signing time: Mon 16 Jun 2025 07:01:05 +0000
Manifest this update: Mon 16 Jun 2025 07:01:05 +0000
Manifest next update: Tue 17 Jun 2025 07:01:05 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: BEsgYQGtqa3mR9mktR0ViVUjkyfgRqOoVqD3OKaPULA=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:a9:f3:3e:d4:08:59:1d:ae:f0:60:eb:5d:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jun 16 07:01:05 2025 GMT
Not After : Jun 17 07:01:05 2025 GMT
Subject: CN=948023decb3e1775315150d26cb0298adb28938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:3d:c2:94:b3:27:2e:69:1b:72:33:55:f7:
f5:6e:d1:14:78:65:81:95:0e:79:73:27:92:57:30:
03:70:9a:28:a1:b8:62:a7:37:7b:23:a0:f1:5b:94:
7a:f3:4c:5f:cf:42:3b:12:a4:ac:5b:6e:98:c6:3c:
38:db:9e:77:0c:41:48:d4:88:28:bf:ad:ec:f2:fb:
51:c9:49:44:32:83:c1:8d:23:08:95:20:b8:77:4b:
48:b5:9b:e5:b1:1a:04:f9:13:88:49:ed:f5:ad:ca:
5b:af:d7:2e:10:a6:aa:64:04:cc:a8:55:55:f9:fd:
71:2d:a6:b6:42:a9:72:87:e2:2a:aa:cd:7c:5f:1f:
b5:0b:7b:0d:86:76:c2:bb:1f:e1:7d:f0:62:96:41:
e6:69:14:87:24:1a:3f:53:6c:78:dc:9f:fd:29:5d:
6d:20:f0:52:40:a6:15:b9:66:e0:57:77:82:3a:51:
92:76:d9:06:79:3b:d8:14:d0:02:e4:b2:20:d2:98:
0e:61:11:d1:e3:29:8c:88:47:4b:d5:af:9e:97:a7:
b1:87:e1:c6:2a:fb:3d:48:d5:01:89:c5:ac:eb:e5:
a1:0d:7c:cf:70:6d:3e:d6:3f:eb:b1:e6:c4:75:3a:
19:21:90:31:8a:3a:ae:89:49:38:54:f4:a1:fd:bb:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:23:DE:CB:3E:17:75:31:51:50:D2:6C:B0:29:8A:DB:28:93:8F
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c5:a4:53:96:0f:56:9b:1a:59:70:43:80:9d:ff:a7:e8:63:
71:6e:6e:9f:55:74:ab:6a:33:de:df:e2:d3:c5:39:f5:48:6a:
ee:4e:77:ff:fe:d6:20:2e:14:da:23:63:e9:d5:d3:68:03:3d:
7a:74:fa:5e:5a:73:42:76:a7:d2:f0:c0:e0:10:da:60:66:19:
62:86:33:f9:63:b0:e7:ea:79:92:3e:61:8a:53:be:60:32:51:
5d:f6:3c:36:41:cd:d1:08:e5:d0:ff:eb:1b:af:37:90:f0:98:
48:41:02:c9:93:3c:fc:1f:6f:de:84:1f:84:9b:86:da:d0:33:
b6:ea:98:7e:1e:c4:fa:71:47:b0:e5:63:b1:e9:25:79:bf:73:
05:d9:6a:bf:b4:5c:58:45:e5:cc:f1:1f:9e:ca:f0:fe:09:78:
99:b7:7a:ec:36:0a:6e:bb:c7:f6:16:aa:9a:9e:87:0b:af:fc:
9a:92:00:33:0c:32:06:1d:3b:d1:0f:d0:f9:0f:3f:78:cc:33:
1a:2e:18:ee:ae:83:96:8d:05:2e:47:71:10:ec:98:5e:4c:41:
76:67:da:e1:64:7e:65:c2:bd:ec:42:9d:28:c2:cb:5e:f3:5d:
95:ac:af:fb:e2:db:e7:01:c4:07:1f:d5:5b:fb:3a:46:4c:bc:
7c:2a:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:12:37 2025 by rpki-client