Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: X1pGGwfc+zuifaZQvDT+k//rH6u4feDjP2T3d4pXfrU=
Subject key identifier: 0A:1A:6D:90:3F:73:80:76:5B:A1:A1:5B:CF:FE:28:B6:30:BB:ED:00
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 01977AC2FE305F01A4521B923E3072505159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 0F5E
Signing time: Mon 16 Jun 2025 22:01:28 +0000
Manifest this update: Mon 16 Jun 2025 22:01:28 +0000
Manifest next update: Tue 17 Jun 2025 22:01:28 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: FrUDLl+ttAbgdm1aQ3QOJ8Uj8j64m09zeg887zcK26k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:fe:30:5f:01:a4:52:1b:92:3e:30:72:50:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Jun 16 22:01:28 2025 GMT
Not After : Jun 17 22:01:28 2025 GMT
Subject: CN=0a1a6d903f7380765ba1a15bcffe28b630bbed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:69:9c:11:b0:21:86:a8:ba:23:c7:e2:2b:
b7:c8:ca:ad:05:95:7f:b2:9b:ec:dc:e9:76:e3:cb:
98:d4:4b:8f:2f:e5:fe:f2:8c:12:e7:3b:a7:e9:db:
29:d5:e9:55:91:4b:f3:ce:fc:a9:56:3c:20:c7:7d:
26:b6:9f:45:be:38:dc:5f:06:f8:c2:09:68:cf:6d:
79:10:d0:e9:8b:70:da:16:85:87:5c:b0:d0:ca:9c:
32:1f:9d:d6:e4:fd:02:1a:09:82:c9:5c:44:8f:ae:
37:a8:98:4d:91:04:c3:7b:f4:52:c1:4f:4d:2e:29:
14:a5:19:ae:7a:99:22:c0:bb:f7:3e:d6:5b:c0:13:
0d:1b:0d:d4:dd:1d:69:f8:3a:2b:01:ee:c8:16:6b:
7c:1f:80:39:08:af:b5:da:9a:9c:a8:1e:65:fd:1a:
e5:b8:d6:05:0e:c3:5e:e4:90:fb:92:d6:f9:d0:05:
7f:17:03:d0:11:56:9e:4e:b5:58:53:86:a6:cd:c2:
f1:3a:bf:d6:95:bb:25:c6:32:b0:6a:30:86:f2:ea:
9d:cd:cc:57:b1:7b:29:61:c0:be:1a:e3:bd:4e:0e:
64:67:0f:f4:37:7a:db:17:55:46:d1:8c:91:b0:a6:
b5:68:93:b1:c2:f6:be:d4:cb:b8:37:46:0f:d2:94:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:6D:90:3F:73:80:76:5B:A1:A1:5B:CF:FE:28:B6:30:BB:ED:00
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:c2:44:d3:3b:ba:1d:da:c9:9e:ae:fa:f3:5f:8d:f6:04:
7e:58:9f:b1:74:73:0d:2d:9b:91:40:6e:74:ad:bc:cc:de:fc:
73:50:5d:0e:be:a3:38:85:2f:a5:4e:3b:e2:3e:74:a0:68:d0:
d3:24:08:6f:e8:c9:fe:aa:7a:a0:27:2c:b0:ff:3a:0c:bd:9d:
b6:1f:67:b2:55:c4:8f:f9:74:b2:c4:3f:15:48:60:ea:d2:18:
b6:62:b4:d8:11:b9:7c:a5:31:86:db:37:80:5a:4e:f5:52:ce:
94:73:8c:ca:25:63:fe:b3:37:c1:ba:5a:48:7e:7c:53:92:c2:
30:3e:ab:01:69:d1:21:50:72:c9:28:5b:e8:a7:1d:35:3e:bc:
0c:00:b9:a4:9d:3a:30:55:64:78:c7:07:36:6c:99:87:8c:53:
50:13:2b:bc:d9:27:6f:7b:c1:65:06:e9:23:85:f0:f5:b1:3d:
6c:d8:94:69:af:dc:ba:69:b6:73:9c:30:bb:de:a8:74:a6:c1:
43:8d:1e:18:dc:1f:0d:f6:92:8d:ec:80:e3:23:af:64:ed:78:
30:e2:b3:05:62:64:74:5e:16:6c:13:66:2c:39:4b:ee:8c:a1:
4a:84:bb:97:98:78:eb:47:dd:3a:40:49:43:64:c7:32:df:ef:
fd:8f:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:37:37 2025 by rpki-client