Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: oAv2UJyfAag0QtukswNlRqPZs8XEBzrw+zBr205/Ggs=
Subject key identifier: FF:7D:34:A7:A7:AF:BC:02:CA:8E:68:81:98:70:7B:AE:74:B4:2F:23
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 0197819FFD1FC74283CDA5EFA6CB118B440E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 06:00:35 +0000
Manifest this update: Wed 18 Jun 2025 06:00:35 +0000
Manifest next update: Thu 19 Jun 2025 06:00:35 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: YeQXbN5iirwlB6P0hP40NU5OirgyHkFPTWCGjJoTSro=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:9f:fd:1f:c7:42:83:cd:a5:ef:a6:cb:11:8b:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jun 18 06:00:35 2025 GMT
Not After : Jun 19 06:00:35 2025 GMT
Subject: CN=ff7d34a7a7afbc02ca8e688198707bae74b42f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:a6:9f:6b:83:71:d6:1f:c4:0b:92:c8:cf:
65:ac:cf:38:2e:04:f2:86:7e:85:be:37:db:d0:0b:
a4:00:67:65:f9:56:d2:ac:59:5d:05:c2:99:16:07:
90:77:af:00:39:e1:4c:f3:76:db:7e:35:1e:f0:77:
2b:82:99:8c:4c:f4:96:7e:5c:2e:e3:ce:9e:e9:7d:
e1:d2:9e:5b:cf:15:46:80:2c:d2:98:dc:bd:d3:d0:
1a:5b:28:75:b4:9c:2a:32:65:de:bd:6d:41:16:cf:
86:15:c7:0e:f3:7c:f1:e5:8f:dc:9d:18:b7:37:9c:
4c:32:6e:f2:4b:d0:63:13:61:9a:be:5f:c2:35:67:
82:ca:ee:fc:93:44:39:7e:2e:0a:e1:a1:b1:80:01:
41:62:92:1a:2b:a6:c7:c8:3a:26:93:07:1d:f5:c5:
c1:62:12:f5:93:be:6e:db:77:85:eb:97:49:09:c2:
7e:3f:a4:4a:58:c6:c4:c9:b0:f9:6b:4b:0a:f3:8f:
d5:4a:b9:be:20:6b:b5:40:ec:35:d7:19:3a:29:58:
a4:1f:31:f7:12:4d:ff:fe:ad:78:57:81:9d:1d:67:
aa:6d:ab:de:49:18:6b:a7:59:05:da:88:8d:c6:62:
76:81:38:78:70:93:87:37:9f:a8:99:9c:5d:71:fd:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:34:A7:A7:AF:BC:02:CA:8E:68:81:98:70:7B:AE:74:B4:2F:23
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:df:2f:5c:71:8d:4c:ca:6e:c8:ab:da:29:d0:23:e9:da:
5c:a6:86:4f:1e:45:03:30:ba:f0:ca:c9:16:c3:1d:0c:6d:5e:
da:b1:dd:d1:5f:89:10:89:27:bd:86:19:f7:c8:f6:82:e5:fe:
a1:52:39:ca:30:d7:08:2a:b7:dc:a2:5b:07:22:f7:51:cc:76:
2e:7f:29:4e:fe:b5:6e:a0:5c:41:05:c6:9a:81:34:9f:12:d6:
77:e9:58:4e:2c:d4:1c:c3:34:10:f7:06:a6:bb:26:76:66:3d:
dc:57:6e:c8:11:5a:59:f6:eb:4f:dd:54:44:15:67:1e:bf:a3:
89:30:72:33:20:dd:7c:a3:2b:68:11:61:3b:76:d3:7d:92:77:
b6:9f:c5:c7:b6:ec:6a:71:0e:81:21:fe:13:a9:cb:c8:e2:9f:
89:3f:77:12:9b:12:f3:f9:93:08:26:b2:5b:31:cc:79:e7:35:
bf:3e:aa:4e:05:86:82:56:8c:9c:06:0a:d5:87:fa:da:fb:66:
3d:f7:ce:9e:0a:e0:07:13:65:eb:85:01:65:77:f3:2a:c2:28:
2a:fb:19:8b:0d:f8:b1:85:7a:ea:89:f1:cb:29:1d:7e:d7:7c:
53:71:51:0a:b6:60:37:4c:88:be:63:c0:22:7a:64:c8:05:1d:
e8:f6:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:27:47 2025 by rpki-client