Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
File: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft (raw, json)
Hash identifier: aUPuKUvZkIt6z4/aufegkfCubLkMTKr+7/wvWkPQccA=
Subject key identifier: DF:CC:C6:4F:F9:48:F9:51:D0:99:9A:2D:7A:42:80:BD:02:9A:35:9C
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Certificate issuer: /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial: 019793DDC8E98A4EA9A5CD7DC9FE3D6FDDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
Manifest number: 0C5C
Signing time: Sat 21 Jun 2025 19:01:14 +0000
Manifest this update: Sat 21 Jun 2025 19:01:14 +0000
Manifest next update: Sun 22 Jun 2025 19:01:14 +0000
Files and hashes: 1: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl (hash: lrpQ62Gqhx2sU4cpjDvTMKxRCJkTHYd+UMhVXG5oduY=)
2: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (hash: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:93:dd:c8:e9:8a:4e:a9:a5:cd:7d:c9:fe:3d:6f:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Validity
Not Before: Jun 21 19:01:14 2025 GMT
Not After : Jun 22 19:01:14 2025 GMT
Subject: CN=dfccc64ff948f951d0999a2d7a4280bd029a359c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:fe:0b:37:d7:7c:18:bf:32:b8:5a:34:3f:
0e:ad:29:e6:d9:d6:84:b9:ec:9a:a5:24:c3:e1:6f:
0d:ca:3a:d2:6a:40:9d:69:41:e9:fc:66:63:d6:9a:
73:9b:49:02:e4:db:25:d5:f5:a6:a2:d1:ad:4b:cc:
0f:d5:90:b7:f7:93:8b:e0:c9:38:3f:42:95:57:b2:
1d:46:c2:4e:02:8f:ba:60:35:33:02:b1:22:37:61:
84:ff:a3:86:92:95:88:bd:06:e6:24:2d:6e:9d:c0:
b2:ce:2a:68:e1:b3:b7:44:fb:96:71:93:8e:d1:8a:
32:b3:6a:ec:92:c1:b7:1f:5d:43:63:8f:4b:2e:ce:
5b:cc:c3:f1:4d:f7:40:7a:61:22:e0:9e:86:45:5f:
da:f7:49:51:09:dc:5a:4b:85:bb:8b:72:64:4c:b3:
a9:20:a9:b4:62:62:fe:01:be:ac:21:10:16:b2:45:
a0:bd:e1:f8:ee:bb:82:e7:b8:99:7f:f4:e3:1b:f0:
2b:d3:0b:84:8f:54:49:91:84:0d:00:f1:07:70:47:
6b:ff:3a:da:ff:68:7c:64:d0:73:fd:35:1e:bd:ea:
b5:91:6a:be:e9:c0:48:9a:40:6d:9c:e7:39:41:d2:
45:e3:e0:6e:44:d6:4e:54:12:1c:04:bd:2c:e9:24:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:C6:4F:F9:48:F9:51:D0:99:9A:2D:7A:42:80:BD:02:9A:35:9C
X509v3 Authority Key Identifier:
keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bd:e1:f4:9e:98:17:40:17:06:9b:c2:c8:f3:b7:14:36:75:
d4:8c:b5:ad:ea:37:c9:cb:71:8f:e8:52:ab:f0:06:7b:02:01:
41:57:e8:09:a8:bf:d4:90:5e:4e:00:44:be:11:65:cb:ed:d0:
70:c7:6f:4e:df:c1:c2:8b:55:b9:09:15:fe:54:33:c7:30:d1:
39:fa:68:f9:0f:9a:12:34:f7:03:2d:70:89:e3:2b:34:c4:c3:
98:2f:7d:da:df:eb:c2:cd:28:be:2d:73:7c:9f:74:ac:76:3c:
04:58:24:5f:98:91:df:18:86:23:ed:30:29:6d:09:5c:a4:7d:
59:3a:82:51:b7:7f:88:c1:4f:b2:0f:a7:2c:af:66:ee:66:03:
35:e8:93:36:39:e7:3a:f6:fe:2c:7c:ef:7e:d0:85:11:97:e1:
cf:27:37:71:70:49:90:60:24:7a:fb:ec:bd:ee:ed:d7:85:0d:
cb:d8:fa:7f:b1:cc:8a:71:72:c0:11:a0:07:3a:89:d1:3b:e3:
82:0d:34:2c:39:b5:a8:32:26:73:42:64:87:2f:a8:aa:3e:2b:
15:5c:e3:d0:f4:0a:ae:7a:ab:98:2b:c8:cf:67:a0:f3:95:06:
b4:5b:a1:f6:b5:9e:74:08:0e:99:81:bd:ae:cc:d6:05:71:76:
92:5a:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:33:28 2025 by rpki-client