Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 5aPwoboRXFs9qUF5BbNW/gTFmkH7gdyVynkX3XAD1NM=
Subject key identifier: 28:8E:E1:28:FD:11:09:36:27:7D:60:64:63:E4:61:45:04:68:B9:1B
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019768F3121B7AB4287B5AA34C35F0ED5B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 03FA
Signing time: Fri 13 Jun 2025 11:00:49 +0000
Manifest this update: Fri 13 Jun 2025 11:00:49 +0000
Manifest next update: Sat 14 Jun 2025 11:00:49 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: ch+KJhJirNRdU+kHZR5gKWS5DZjVVcBxgsu8eDoGdnk=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:12:1b:7a:b4:28:7b:5a:a3:4c:35:f0:ed:5b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jun 13 11:00:49 2025 GMT
Not After : Jun 14 11:00:49 2025 GMT
Subject: CN=288ee128fd110936277d606463e461450468b91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:a9:f4:c9:b7:09:64:85:c9:83:98:de:e7:
4e:81:da:f8:c0:67:52:63:a2:af:3e:2b:b1:39:79:
29:ee:e7:87:f9:e3:34:ad:bd:2b:6f:89:5f:c0:e1:
3f:61:77:09:dc:2e:0a:cf:96:b3:36:15:02:05:36:
80:ff:8a:fd:3d:d5:c5:88:e9:cb:ee:29:62:61:64:
d8:fe:6e:a3:7c:a8:70:14:1b:ac:e7:46:61:61:c2:
ca:7d:39:24:ca:a4:c4:47:4c:39:e8:f5:86:de:f8:
08:6a:7f:23:69:81:d5:bd:5d:b1:19:9d:af:e4:ac:
e8:2a:cf:2d:a8:e2:35:c1:ff:2e:2b:f3:12:6c:97:
49:ca:a6:e1:e0:be:41:a7:d9:75:5e:d6:a7:95:ba:
99:b0:48:75:73:11:06:04:40:9f:46:68:ba:cb:80:
e7:68:1c:27:65:f8:a5:0d:cb:57:30:f4:85:53:f9:
27:13:c2:e8:aa:41:40:d7:e6:9a:0d:58:d3:5c:1d:
8b:9d:d6:f7:6d:d6:26:8a:b3:0f:88:45:df:35:e5:
83:1f:9d:16:0c:e0:00:c3:ad:4c:ec:3a:81:b0:ae:
77:78:8e:e3:95:a6:6f:77:af:02:97:21:db:de:3e:
86:1c:60:24:d9:6f:5a:86:1d:46:c2:c6:6a:9e:62:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:E1:28:FD:11:09:36:27:7D:60:64:63:E4:61:45:04:68:B9:1B
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e6:ae:14:87:ed:34:9d:07:ce:53:f5:bd:fd:8d:43:e8:28:
75:da:4b:b1:00:15:e3:89:19:96:49:20:e4:51:5f:ea:83:e0:
aa:1a:7a:13:4c:3a:4b:95:6b:2e:5a:68:1c:74:de:2a:bb:95:
c1:e7:10:3d:75:24:67:be:18:a5:60:2d:32:9f:ab:28:bf:41:
55:68:0a:21:c0:d8:09:2d:d5:60:56:16:44:36:a2:92:7c:d1:
28:7b:9a:ba:e8:1a:1a:e2:f5:e7:8a:04:c6:aa:fe:de:93:83:
86:e1:aa:ce:8d:ae:bd:59:bf:21:e6:b3:90:62:1e:ec:b4:2d:
fc:0b:49:57:62:80:04:2f:e6:6a:94:96:a6:84:fa:bf:87:48:
9d:c3:c1:2a:75:8d:55:ec:d6:69:cb:ef:16:23:c3:9d:8a:01:
4b:83:31:b3:45:2a:eb:ef:f1:32:8f:a0:c5:c5:91:1b:9c:06:
65:ad:1a:95:30:bf:e7:95:a2:30:87:2f:db:4c:92:99:fa:db:
1d:3b:3e:e0:f9:9f:88:93:76:87:8d:d1:f4:19:af:e4:f8:d8:
08:05:ad:8a:61:be:89:9e:f1:79:1c:6d:72:f5:c4:2f:de:6c:
50:1c:20:59:25:88:cc:2f:71:c9:aa:8b:62:0e:ff:1f:c8:1b:
4d:5d:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:57 2025 by rpki-client