Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: K7ST4SbMA//km5eApaxc6epprH8R9sspfCpZzu/G+Q0=
Subject key identifier: DA:92:0C:A4:AA:52:BB:DF:77:29:58:4B:06:51:87:FA:CA:C6:E8:5F
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01976CCF6ED825D7C8C352BEF2752F28A96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0D5C
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: YlNB2NNOxcllyefVI92ljt9W6hi9+zZPQkcUQPFQSsQ=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6e:d8:25:d7:c8:c3:52:be:f2:75:2f:28:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=da920ca4aa52bbdf7729584b065187facac6e85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:fd:d0:e1:ba:74:c6:48:f7:5f:fc:4f:bc:
7d:76:f3:b6:59:73:0c:1d:52:aa:d2:4b:28:6a:b6:
8d:e6:ab:5e:6c:67:9c:81:e2:54:fe:f0:35:81:2b:
18:48:00:a9:00:49:11:e6:18:e7:93:4e:b0:14:f0:
aa:b9:40:de:1c:48:8e:da:fe:06:4c:35:49:99:4c:
ad:89:89:76:c6:6a:5f:a6:25:17:c4:3a:ab:2a:05:
93:33:4e:62:26:ab:2f:e9:61:31:27:3e:ef:2b:91:
14:d3:c8:dc:d8:e1:2c:e9:73:58:9a:b8:0f:3e:08:
f5:df:4a:29:6f:82:2b:b8:9d:12:a1:fc:b7:12:d9:
0f:e4:a8:41:cb:74:50:27:0b:ea:2e:3c:00:b4:d7:
b6:38:19:2e:50:74:ad:95:3c:b8:32:35:6e:d9:9f:
d1:bf:e3:7d:f1:40:d0:68:cb:1f:01:e1:98:28:04:
e0:f2:58:63:8e:63:8e:10:15:6f:d1:32:7c:fe:4d:
2f:e0:71:8b:0f:e0:7f:25:b0:1f:6e:7d:ff:27:3a:
0a:77:ae:b7:d6:73:9f:08:6c:6a:ba:46:1c:5e:70:
1d:0f:fc:0c:85:fe:d4:02:7f:60:f8:2e:c2:f7:b9:
85:c8:3b:a3:0e:fc:3b:d6:54:2f:29:4a:b4:7c:11:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:0C:A4:AA:52:BB:DF:77:29:58:4B:06:51:87:FA:CA:C6:E8:5F
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bd:5a:75:fd:fe:b3:90:86:80:5a:83:ae:5e:23:90:e3:98:
54:10:05:da:eb:7e:20:9e:c0:ee:a1:c3:62:89:ed:ed:90:95:
f8:84:b9:1c:b1:72:b2:5d:58:7d:93:6c:65:31:f7:8b:e3:ca:
af:cf:45:f7:95:1e:be:05:fb:13:8e:e1:2f:50:a6:d8:50:8f:
56:cd:57:5d:4b:ce:49:6b:f5:9d:a2:4c:ff:ab:76:b1:77:7d:
03:a8:96:7f:bd:b3:2d:0d:ea:dc:28:83:a2:9a:7b:4c:d8:54:
0f:e0:da:82:05:83:f4:d2:19:58:5c:f5:bf:c0:f8:4c:16:2f:
9f:18:6d:8f:e1:1e:97:68:12:97:9a:93:85:8f:f4:74:1d:9c:
5a:b7:55:d2:64:90:ed:4e:a7:52:c1:c3:80:44:ce:2d:a1:12:
c8:5a:11:d4:95:f2:93:96:d7:a5:80:c7:22:59:f2:1b:60:29:
76:21:12:4e:55:6d:3a:a3:95:9d:49:73:ac:f0:43:8d:3a:d2:
25:75:8a:7a:24:c7:c3:64:63:7d:f3:8a:9a:53:a4:e4:1b:5f:
1a:ec:b1:93:5e:ab:16:7f:f6:b3:f6:6b:75:5f:c1:c0:dc:67:
1e:29:2f:06:4b:2c:7c:61:f6:9e:92:40:5d:12:df:3f:43:ab:
d5:a0:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:54 2025 by rpki-client