Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: MiXZjhpi+sHPWT+5FgVXknybAZbMnkS7v3SltYzPlOI=
Subject key identifier: 6C:80:8D:B1:14:64:A3:42:96:C6:AF:15:50:EF:F5:E2:16:6A:8B:B5
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019770E37A2D190187263A5B2B858D4D3880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 00:00:45 +0000
Manifest this update: Sun 15 Jun 2025 00:00:45 +0000
Manifest next update: Mon 16 Jun 2025 00:00:45 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: 93koXkdbg+old6MRDtG66DZYEIWmiCdUSiZX4j+jI7Q=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7a:2d:19:01:87:26:3a:5b:2b:85:8d:4d:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jun 15 00:00:45 2025 GMT
Not After : Jun 16 00:00:45 2025 GMT
Subject: CN=6c808db11464a34296c6af1550eff5e2166a8bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:a1:ee:16:05:8c:9b:2c:98:52:1c:11:6f:
76:13:4b:f3:57:35:5f:d6:3b:a3:63:ce:b4:2d:10:
c9:51:be:32:a6:bd:4a:d2:6b:93:4f:d4:d6:e1:db:
d7:cc:b7:43:44:c0:19:c9:9d:d6:37:34:83:11:05:
a4:1a:6a:90:59:f7:71:5e:7b:7d:94:8a:3a:c0:07:
d7:e7:ed:eb:28:8b:ff:a5:f0:3c:36:f3:d0:69:9b:
69:07:3b:e7:bb:8a:aa:07:4b:69:c5:9e:43:ab:00:
f0:8a:0d:2e:c7:b3:fb:5b:ef:23:9c:85:4b:10:6b:
82:f5:3a:22:db:8f:d4:5a:bc:22:4b:c0:41:43:dd:
50:1c:ed:1f:06:05:28:27:fa:c1:79:78:0e:75:45:
12:05:97:9d:67:f8:00:6b:59:1d:bc:9c:58:db:eb:
39:77:36:65:2a:3c:fc:48:b5:f5:b4:67:28:d8:bd:
cd:f3:21:63:de:dd:e4:f4:62:92:44:1b:bf:22:c1:
00:f7:5f:1f:f7:60:36:f8:06:91:1d:cd:e1:b6:33:
b6:92:79:dc:9a:c3:d6:87:47:c9:9d:53:c4:27:8c:
8b:2e:90:6c:51:2c:2f:3c:87:d1:bc:60:d0:82:e7:
82:5b:11:c9:21:27:d1:97:f7:be:a2:53:38:c8:b4:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:8D:B1:14:64:A3:42:96:C6:AF:15:50:EF:F5:E2:16:6A:8B:B5
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c1:ad:c0:3f:fc:37:1d:84:b6:79:47:d5:59:1b:0c:63:92:
52:d8:ae:bb:58:64:44:c8:0b:da:a0:1c:c0:79:ce:e9:32:66:
4e:fc:63:9b:8e:69:0c:31:3f:d1:cc:98:a5:1c:b7:32:f6:c2:
09:6e:30:44:2c:bf:53:5a:40:02:e4:ba:e1:79:36:28:41:8a:
23:77:4c:80:76:44:ed:98:40:6c:80:e7:8f:38:ef:ae:fa:9a:
3e:a1:41:68:a8:bc:6b:4c:2e:55:40:64:cf:c4:c5:f0:74:4a:
55:fe:1a:64:1a:22:b9:43:a5:a7:74:1b:82:bc:c5:b6:30:3b:
af:7c:77:b1:c1:e3:75:6b:ce:c8:3f:4e:eb:06:80:3a:96:95:
96:fa:a3:9d:d2:64:8a:78:29:e1:b7:8c:d1:c8:82:87:62:63:
9a:94:46:62:5c:33:44:ef:e4:8e:f5:7d:32:c9:4f:c5:0f:50:
c9:64:51:70:a9:81:8b:51:ab:07:bc:c1:2f:e6:03:7a:2a:ff:
d9:52:10:41:42:9f:da:a2:50:73:05:a0:bc:d4:d5:6f:42:29:
fb:6a:63:fe:4a:bc:55:c1:a9:d1:7a:81:61:04:6f:b0:38:68:
91:c7:83:c6:ec:cb:74:6f:7a:7b:e0:28:be:04:ed:fb:a1:d0:
ce:53:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:42 2025 by rpki-client