Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: lNmO2/7SLAZ51ocCC5RtkPWlnT/2RGjhT+SqFV/S80U=
Subject key identifier: 5F:8C:B2:02:95:45:25:0C:9F:E4:21:2A:76:91:10:E0:AA:79:CC:B5
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 01976929A47C71A6E4EB139F81F2AB9A3442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1392
Signing time: Fri 13 Jun 2025 12:00:26 +0000
Manifest this update: Fri 13 Jun 2025 12:00:26 +0000
Manifest next update: Sat 14 Jun 2025 12:00:26 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: 6zv1yIQ6Fy8IDnPsuXT4G5pWqAI3YgFqxg869eXnK5U=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a4:7c:71:a6:e4:eb:13:9f:81:f2:ab:9a:34:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jun 13 12:00:26 2025 GMT
Not After : Jun 14 12:00:26 2025 GMT
Subject: CN=5f8cb2029545250c9fe4212a769110e0aa79ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:85:27:52:a5:f5:13:43:23:e3:d2:d9:c2:
f5:c0:17:ce:10:3f:5c:42:79:5f:89:aa:09:ef:b0:
aa:77:b9:a7:c6:d5:18:01:df:00:e3:25:69:f2:52:
e1:f0:bd:87:fd:10:6e:b4:61:b8:3f:50:67:13:32:
f7:8f:9d:c1:13:b2:1e:af:bb:8d:68:5d:6c:f3:3d:
c9:db:2e:75:9c:cf:9c:1d:07:21:53:6e:2a:b2:c1:
ae:4a:45:53:be:b6:bc:e3:a3:49:93:42:b2:e7:c0:
12:06:bf:0f:a6:9a:05:f5:93:1d:31:d8:7c:22:cb:
29:38:b1:ab:e6:68:8f:1c:fb:cd:59:eb:6b:9f:77:
4b:4f:ce:fe:e4:64:7a:9b:ce:23:65:34:d6:ac:9d:
6e:9c:c3:34:d3:82:a9:e7:92:67:f0:b8:7a:d4:22:
88:93:d5:78:82:3b:15:6b:6c:b6:15:87:c2:81:4a:
7c:92:7f:d7:d9:38:df:8f:f1:71:89:87:45:6c:36:
48:77:eb:bc:3f:f1:99:f4:fd:77:6b:0b:e0:70:f9:
76:55:ef:5c:6b:fa:4c:c0:3b:f7:90:1c:df:61:a2:
27:1d:2a:bb:85:29:9b:da:37:2b:6f:a4:c1:90:d0:
4e:3c:75:fa:be:38:46:08:41:7d:03:7c:77:d9:90:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:B2:02:95:45:25:0C:9F:E4:21:2A:76:91:10:E0:AA:79:CC:B5
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:cf:5a:07:e2:ac:80:cd:84:08:72:19:7c:8c:d0:04:f5:
e9:fb:21:7a:f6:47:7d:f3:e6:1a:4a:9c:a9:b0:66:56:0a:9c:
cf:20:e9:cf:0e:3c:83:d7:33:fe:9e:e3:33:a3:fd:04:39:6d:
93:57:73:bd:e2:74:a7:a2:26:7d:d2:8c:99:6c:ac:17:01:7d:
bb:3c:df:51:e8:51:ae:5a:39:76:c4:21:48:89:18:0e:ab:12:
ca:d6:17:0e:ea:96:9a:df:69:9e:8c:c1:8b:8f:d2:4d:c2:ce:
8c:44:77:2f:7a:86:00:12:f0:9d:87:bb:c9:1f:3a:2c:7e:15:
aa:42:df:2e:2d:83:c9:cb:67:48:4d:3c:ad:ec:fc:44:ce:6f:
8f:06:c4:9e:db:19:1e:90:51:64:48:65:02:58:5b:8c:d6:38:
cb:e1:52:ab:be:d2:5a:36:ea:da:36:23:4b:09:29:2e:99:39:
fd:af:14:02:e8:76:6c:db:2a:cc:42:00:ba:93:e6:b7:b1:32:
bb:42:2a:66:68:b0:77:9b:fb:d3:f8:9d:3b:31:b2:45:16:fc:
db:ef:3d:4d:7f:6c:c8:74:9e:58:af:17:ca:97:2b:2e:ed:1c:
43:b5:fb:53:5c:55:00:5e:f5:f9:1f:b6:7c:81:b1:e2:f7:21:
d3:a5:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:08 2025 by rpki-client