
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: o7DSuTxZInYdAq+k5P8UDbS+FBxCdeFryGBweWogq/I=
Subject key identifier: 29:E4:93:A6:8C:53:EA:7B:BC:9A:AA:B6:3D:88:49:1B:85:78:4C:07
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 01977308B7888994D0E15C86CF7BE8E9E5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 02F0
Signing time: Sun 15 Jun 2025 10:00:40 +0000
Manifest this update: Sun 15 Jun 2025 10:00:40 +0000
Manifest next update: Mon 16 Jun 2025 10:00:40 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: gXxd556AL0T38berT8SK9Y3SNz82y0lxVGgRdRxrJ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:b7:88:89:94:d0:e1:5c:86:cf:7b:e8:e9:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jun 15 10:00:40 2025 GMT
Not After : Jun 16 10:00:40 2025 GMT
Subject: CN=29e493a68c53ea7bbc9aaab63d88491b85784c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:7a:3e:94:4b:57:0e:c5:10:d9:10:14:f6:
3d:72:f4:37:f4:81:05:9f:11:be:5e:d0:06:b0:1a:
00:1b:1f:ea:ff:4d:7d:d4:14:72:51:cb:4c:21:bc:
cf:a1:07:58:57:ae:84:e0:71:99:ac:1a:9f:87:57:
82:63:c1:bd:84:07:25:fb:b7:8f:09:bc:e7:71:af:
69:3a:4c:18:a0:49:15:cb:68:68:2a:99:1c:7c:d9:
69:21:af:7a:fd:fc:c1:b9:83:ba:8f:57:a9:81:4d:
a0:41:6a:74:7e:96:14:47:02:70:f3:93:1e:7a:52:
bd:89:47:fd:0b:58:06:de:37:6f:3e:c7:31:57:60:
c3:b6:75:64:06:69:42:78:fa:d0:26:5c:1b:ec:f0:
c4:98:40:6a:b4:dc:a6:0e:51:cf:9d:7e:85:f7:d0:
49:a2:88:2e:a4:69:5c:4f:6b:ad:39:3f:1a:0b:db:
79:94:89:0c:d9:f7:82:7c:30:70:0c:9a:cf:39:b3:
51:9c:a3:8f:28:fd:71:b0:9d:99:e1:b1:be:a2:7f:
f0:7a:88:9f:81:5a:92:52:ea:b5:84:86:5e:47:b7:
8d:aa:39:ef:5f:cf:c7:c6:36:c2:fa:1b:c6:ed:e1:
50:98:df:e4:72:60:a4:6d:60:06:67:77:26:8a:cb:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E4:93:A6:8C:53:EA:7B:BC:9A:AA:B6:3D:88:49:1B:85:78:4C:07
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:2a:5c:a9:c8:a0:1f:80:92:cb:55:3c:70:99:0d:f3:d8:
33:09:be:46:cf:15:f6:2c:b6:10:a2:43:e9:40:55:41:b5:ed:
0f:fb:bd:1e:92:07:3e:17:ad:11:f3:1d:4a:49:7d:55:d6:b8:
43:20:ba:6d:b5:26:0e:87:39:a6:be:b6:ca:b6:3f:f8:e4:9c:
f9:83:a7:69:9a:88:dc:e0:00:63:38:4d:f6:5d:a4:fd:33:4b:
95:4d:71:9b:ba:78:bd:1c:53:dc:02:12:57:92:ca:aa:cb:21:
09:1e:48:b0:cf:5f:18:fd:08:c5:18:3b:47:23:81:1b:38:fb:
76:4b:90:74:58:fa:54:fa:86:7b:a8:d3:c1:10:ac:3f:20:10:
70:da:0e:e7:ef:1b:09:a6:47:e2:0f:2f:ca:1c:c8:c9:ad:98:
5e:d8:39:19:03:0b:e2:1c:eb:9c:a5:a7:17:72:5d:15:88:df:
1e:b1:b8:95:b6:32:c5:2e:1e:92:ca:27:e1:65:1a:d9:fc:65:
41:58:3c:76:c4:d2:c5:db:80:b1:09:7e:92:f4:4b:09:fc:df:
84:d1:e0:56:d2:a9:d7:2d:15:f9:80:6f:03:6b:cd:42:d0:9c:
3c:a6:36:da:98:18:77:fe:5a:c3:2b:48:c3:14:d8:88:4a:28:
98:ae:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:10:37 2025 by rpki-client