Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: L1CNe9tyo8OStIl3AKEYkzNjMMdbHTs2OoQyx0QT88k=
Subject key identifier: 12:BC:F5:DF:9F:C6:15:8D:33:5A:04:23:78:C4:EE:B2:D5:2F:06:D7
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 01976CCF7DB6E2865FD74B126002D91DC93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0C4F
Signing time: Sat 14 Jun 2025 05:00:26 +0000
Manifest this update: Sat 14 Jun 2025 05:00:26 +0000
Manifest next update: Sun 15 Jun 2025 05:00:26 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: QkZ9tcjpCLMXYeurWhAwM4grx29asQ7/OX6ygtqAvjY=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:7d:b6:e2:86:5f:d7:4b:12:60:02:d9:1d:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Jun 14 05:00:26 2025 GMT
Not After : Jun 15 05:00:26 2025 GMT
Subject: CN=12bcf5df9fc6158d335a042378c4eeb2d52f06d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:25:e3:ad:23:40:96:4b:17:98:c1:5c:dd:
25:03:67:8f:3b:90:0e:72:57:fe:f6:45:32:d8:7a:
3a:9c:6a:3f:fc:a9:79:68:08:5b:48:2a:5a:9d:b6:
92:0f:81:3a:b7:9f:08:3c:53:19:6a:11:86:4b:ce:
e2:e8:cf:64:d6:b0:c3:af:56:8d:02:51:b7:20:97:
bf:55:8b:23:60:37:1c:6a:9d:7c:6f:af:ed:70:84:
93:1b:92:e6:17:0e:89:02:c5:d0:a6:92:e2:c4:5d:
bc:23:4f:49:d1:ee:a4:f3:68:6c:74:62:ec:a8:d2:
54:13:31:fe:27:da:6f:60:f9:76:61:d5:e8:33:6a:
56:cb:34:c9:de:bf:24:22:2d:ec:ff:f9:93:ed:9a:
a6:81:88:53:b0:e8:ef:72:c1:22:de:05:be:ce:00:
91:92:8b:44:40:95:35:ac:de:c1:a3:4f:ac:7d:3a:
c8:4c:96:57:48:34:3c:42:f3:3e:9a:01:df:8c:ba:
5b:6d:04:89:25:7d:43:d9:73:5a:e8:c1:56:53:fd:
b2:cd:f6:0b:30:54:1b:17:de:f8:e0:2e:df:72:af:
37:0f:95:2a:9d:3d:6f:9c:65:2b:fc:37:05:d8:ef:
a3:04:cb:67:9b:b7:98:a3:dc:62:a9:a8:39:23:39:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:F5:DF:9F:C6:15:8D:33:5A:04:23:78:C4:EE:B2:D5:2F:06:D7
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:70:17:91:63:5b:c1:0a:a7:e1:86:72:45:d4:b2:6d:86:d4:
b0:89:a8:7b:fd:79:dd:2e:0d:c7:75:18:53:fc:fa:27:97:22:
ca:79:53:1b:9e:62:67:4b:36:f7:53:66:3c:e2:61:e8:d4:39:
df:59:82:45:8f:68:80:6a:5b:ea:21:94:04:ea:a2:4a:05:34:
30:f5:15:bb:b3:d6:78:53:a1:b7:f0:ea:ff:de:b0:9a:a1:95:
69:7d:bb:0c:17:64:52:fa:4a:12:3f:6f:c8:8f:75:da:0e:87:
e7:19:b3:6b:99:df:e6:f3:a7:50:64:21:df:07:14:a7:2c:b6:
4a:00:ce:0e:c2:1f:88:69:35:58:32:02:83:11:90:aa:69:8e:
28:e7:07:17:fb:17:0a:ef:0a:05:48:06:a2:cb:35:54:01:6d:
15:77:bb:00:1f:c0:61:93:10:16:27:59:e8:1b:a1:b6:eb:d0:
71:36:ef:87:e4:ae:39:de:69:f2:cd:6b:c6:cf:5a:a5:c4:fa:
b7:09:36:b2:45:52:25:a2:88:f0:01:40:c9:fb:07:10:08:ea:
c6:7e:62:ee:fe:83:a3:e0:36:e9:dc:d3:bd:b4:55:ac:80:6a:
f4:d9:12:13:e6:90:e2:7a:ba:e5:f8:81:51:80:2f:c0:4f:cf:
84:9a:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:53 2025 by rpki-client