Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: nyr22da/Z+3lDJetpOJc13qKkW1/RKhuvjHNqv26U9A=
Subject key identifier: AA:48:7F:BB:61:D2:60:D6:CC:D8:30:5C:AA:71:E2:F1:9A:21:38:D9
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019769CEFF4DC84F6848E49A0F6CEEA5E8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: 3TZD6nwtAtY0JW2xwsuTcpzzgHvLUv2+FHQSGRYqZrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ff:4d:c8:4f:68:48:e4:9a:0f:6c:ee:a5:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=aa487fbb61d260d6ccd8305caa71e2f19a2138d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:36:6a:cd:0d:ef:fd:df:d1:e1:bd:36:87:
a6:ee:b3:b7:3d:cb:4c:52:9b:e2:ec:37:d0:96:3f:
95:9f:b2:1f:54:5b:10:cf:42:50:6e:12:8c:d9:13:
1d:95:6c:f9:b4:35:e7:45:38:c5:0f:bf:9d:7c:a4:
6b:ca:61:be:60:d7:c7:b5:a1:18:ce:a8:e7:73:99:
4c:fa:90:49:b8:ac:34:3a:f5:92:67:ed:36:f3:8f:
ec:31:85:85:d6:41:33:e6:89:87:0b:37:67:23:13:
e6:95:bf:6d:3a:d9:98:d1:e1:ea:f2:65:8d:0c:6d:
a9:71:4e:b4:9f:40:05:d5:56:ca:60:be:69:b7:5b:
69:e2:95:3c:40:c9:ff:0b:44:fb:c8:a6:46:30:15:
49:d8:8d:53:c8:ca:78:72:d5:87:cc:65:98:83:84:
b3:f4:6c:fd:02:d4:ee:d2:37:ba:65:57:83:cb:15:
d9:8d:61:78:ca:2e:e6:eb:a2:b0:8e:07:d2:60:f6:
ee:f9:a0:16:98:60:47:6b:2e:a4:1e:3b:e3:ed:34:
0b:47:21:a2:b2:0e:e3:0f:fa:2b:c2:0e:23:3a:96:
a0:73:1d:0e:bc:30:e4:97:14:27:32:44:1d:da:b3:
47:d6:96:6c:ca:26:a2:90:6b:bf:d0:d4:f7:52:3b:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:7F:BB:61:D2:60:D6:CC:D8:30:5C:AA:71:E2:F1:9A:21:38:D9
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:62:b1:3f:0e:05:ea:f0:16:1f:5b:bb:71:8d:c0:24:40:
ba:ba:bc:40:89:6c:4a:b9:a7:4f:44:a0:48:ae:94:a3:96:47:
75:0e:70:47:d1:b5:eb:3c:ba:1f:3e:d6:76:8a:a8:db:f8:6b:
d1:c4:48:69:8b:a8:b1:ff:f1:6e:4f:47:5b:8d:69:a8:9a:c4:
b8:8f:25:ef:ae:f9:33:3f:3c:74:0f:0a:d7:5c:7b:d4:b4:84:
b6:c6:29:e6:7a:f5:34:f6:04:c4:c3:3e:21:a8:1b:32:2d:62:
fa:c9:82:16:ae:e5:0f:9e:75:05:de:82:3f:c5:90:92:20:2e:
99:ea:ec:af:a5:00:67:84:b6:fc:eb:b2:52:54:04:7d:07:25:
de:d7:c7:a6:45:24:8f:f3:21:58:43:64:8c:f2:46:a8:b8:bd:
e9:db:d1:dd:74:66:8f:16:89:63:d2:a0:17:09:85:14:0b:4c:
b4:50:07:16:be:92:37:ad:a1:c1:78:0c:86:e2:06:84:4d:93:
76:56:94:ca:41:ec:a4:92:28:ab:11:2d:79:dc:c6:1e:89:50:
9d:9c:b6:ed:1d:c9:90:86:b1:ec:76:8a:58:a4:d5:a6:dc:03:
b7:dd:df:4f:f2:b6:0c:63:26:f7:23:5b:25:40:72:1f:ba:66:
88:ff:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:53 2025 by rpki-client