Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: 4sNIYjPHiVbH0P9OOweYRra9PSdOIsMR/nBFtYU9cFM=
Subject key identifier: ED:4E:96:18:1E:2A:FF:A0:B3:63:E0:96:93:DF:6E:80:7C:FD:C5:BD
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 01976CCF8F3693E20505CE7A0CB5D451EAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0C5B
Signing time: Sat 14 Jun 2025 05:00:31 +0000
Manifest this update: Sat 14 Jun 2025 05:00:31 +0000
Manifest next update: Sun 15 Jun 2025 05:00:31 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: ynsK/MS/gO8Ow/2EJPADcAdbpbuqGWZ3Jx64vibtTEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:8f:36:93:e2:05:05:ce:7a:0c:b5:d4:51:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Jun 14 05:00:31 2025 GMT
Not After : Jun 15 05:00:31 2025 GMT
Subject: CN=ed4e96181e2affa0b363e09693df6e807cfdc5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:67:66:8c:1b:91:ef:02:a7:41:33:43:16:
10:23:3b:a1:bb:61:91:d7:1b:aa:3d:02:22:1a:cc:
30:d3:27:17:97:50:02:45:6a:eb:e0:23:9b:6f:64:
9f:6e:75:a1:63:2a:f5:69:f0:55:29:41:70:b4:72:
7d:c8:5a:92:39:12:20:e7:52:25:65:bd:c1:38:4d:
e7:f5:33:2e:f0:58:48:84:16:92:ce:d9:8a:97:44:
31:68:f3:14:0b:41:e6:6d:25:7d:53:28:2a:8d:bc:
6d:36:e5:76:0d:ce:79:8a:9a:32:84:db:b1:2a:b0:
3c:c4:d3:dd:5b:59:44:48:86:d1:e9:9a:cf:3f:e2:
d6:02:80:5b:85:3d:7b:4a:38:15:95:e6:c6:f1:e3:
4d:24:67:bd:11:6a:1f:fb:31:79:78:6e:59:40:71:
60:e6:06:1d:f0:10:fc:fc:03:ea:f4:08:3b:63:27:
8c:d0:f5:c8:19:14:37:97:e9:5d:45:f9:11:79:d7:
10:c5:4a:5c:98:73:53:e5:51:c4:af:93:84:6d:73:
b8:4a:4b:31:00:37:4d:04:ca:5e:ce:af:ca:d7:11:
bb:04:ed:a1:ac:c9:06:93:5f:6b:3c:56:de:62:83:
b6:83:01:54:23:84:cd:a3:b5:17:0d:f6:75:9a:4a:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:96:18:1E:2A:FF:A0:B3:63:E0:96:93:DF:6E:80:7C:FD:C5:BD
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:25:66:dc:3a:33:e1:d2:93:b9:7f:3c:3b:ef:bc:83:01:4d:
3f:0c:71:aa:7c:d1:3f:9a:50:d0:91:a7:eb:18:6d:cb:8e:d3:
b4:0e:13:2e:8c:27:18:41:79:b7:6d:2e:c4:9c:a5:5b:f7:75:
07:86:b0:8f:32:86:60:11:1d:15:b6:b0:1c:12:aa:52:2f:a7:
34:24:69:d7:ff:13:11:a5:89:a8:40:5a:bf:73:aa:8b:f6:d9:
b0:9d:66:44:1a:b7:63:28:76:93:9e:be:f5:f4:1a:12:6d:18:
a8:27:e8:bb:e1:b4:d2:21:69:a3:6f:2e:60:68:ea:7f:82:56:
be:b5:55:ac:94:d3:b4:e2:42:8f:67:65:92:2a:a7:82:a7:81:
1c:e0:92:1c:27:e6:78:14:e0:20:aa:e1:c3:01:37:73:8f:25:
3e:5d:34:b8:b0:70:d2:04:9b:2f:f2:35:98:b9:51:e5:9d:b0:
70:ee:97:54:39:66:df:90:0f:89:8f:ad:de:2f:0e:06:77:b2:
c6:15:e4:b9:7b:d1:94:34:50:58:77:ee:3e:8d:d1:ae:aa:32:
0c:ef:eb:5e:b2:30:a6:c4:09:d1:e4:33:6b:31:5c:91:58:30:
a7:62:86:70:3a:fb:e9:4d:8e:a6:54:93:3d:21:95:c2:80:8a:
b5:b8:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:38 2025 by rpki-client