Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: DpZzaxsjECfdG1z4BeJ7sMXnEKqoS0S/YIWRmKGPgzY=
Subject key identifier: 3C:60:0F:35:DF:25:93:E7:24:BC:8A:DA:C1:4D:62:6C:9F:DA:8C:8B
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019753B45BF2FB6AF331F710A348839E3941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 08:00:18 +0000
Manifest this update: Mon 09 Jun 2025 08:00:18 +0000
Manifest next update: Tue 10 Jun 2025 08:00:18 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: jtxnho/aArpQxJ0or7xQt1oeq6RYmi0d2+C69tCTTRM=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:5b:f2:fb:6a:f3:31:f7:10:a3:48:83:9e:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Jun 9 08:00:18 2025 GMT
Not After : Jun 10 08:00:18 2025 GMT
Subject: CN=3c600f35df2593e724bc8adac14d626c9fda8c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:f1:44:4f:72:f8:d5:16:aa:79:1c:99:e6:
e3:29:c3:59:5e:23:0c:17:d2:31:8d:86:3f:9e:27:
7f:1f:3b:cc:55:dd:0b:b1:52:54:6a:87:e1:d4:21:
82:4d:01:e6:bd:a8:20:04:d9:f7:32:25:a8:88:d4:
3a:9d:23:82:59:74:8b:9b:93:d8:c3:f7:14:02:34:
20:98:b2:c2:fb:9e:5c:61:4f:fa:27:97:d0:22:25:
ab:91:55:a5:38:e7:85:11:0a:eb:45:85:12:93:11:
30:d1:b2:83:81:a6:cf:d5:68:7a:8a:52:32:3c:b5:
8b:b0:da:4f:82:a5:25:4e:1c:96:95:f8:59:4f:fa:
c4:df:ff:0a:73:c4:3a:b1:3d:01:2d:93:52:fb:43:
42:16:12:56:61:a5:5e:37:e6:f4:b0:6e:b6:30:dc:
2e:7c:be:25:1d:43:f1:8a:fc:59:48:4a:9d:26:c7:
0d:41:f1:22:4c:cd:f5:fb:44:5b:47:96:4d:8a:9d:
44:1d:26:14:2e:9d:fa:17:67:39:e5:92:87:ca:01:
36:87:62:ee:e5:f5:03:49:98:4a:7a:29:41:1e:20:
6d:7c:9d:17:e3:44:4b:c4:11:b3:7e:b4:25:7d:29:
8d:01:07:5c:31:36:5a:ed:8f:7d:8b:09:1d:a5:c7:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:0F:35:DF:25:93:E7:24:BC:8A:DA:C1:4D:62:6C:9F:DA:8C:8B
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d0:4c:f9:4b:1a:1b:31:af:b1:96:dd:1f:b3:38:01:1b:67:
9a:0f:4e:63:55:65:0d:ee:f2:cd:0c:8a:2e:69:f7:2b:59:1c:
20:8f:86:a0:4d:c9:4a:f7:b4:fd:00:20:fb:79:2b:cb:c8:68:
2f:3d:14:6d:1d:58:92:ac:71:7c:85:84:f7:d9:ff:f1:8a:2e:
98:8c:de:43:9d:ad:60:49:f7:81:ff:f1:04:3c:2c:c7:69:0d:
0c:68:84:e4:a3:cb:31:b6:da:1a:3c:2d:f5:eb:ff:ce:c6:e6:
93:c9:ef:6a:da:e9:9f:0b:f5:0d:f3:7c:fa:0b:e6:68:75:fa:
82:03:57:c7:0f:0c:20:0f:71:30:ed:6f:48:0d:10:22:a3:1f:
39:c1:b7:8f:cd:b8:a9:d7:6e:9b:0b:81:b1:db:98:d4:45:08:
28:26:5c:7d:48:5a:52:a2:ec:4d:a0:f6:67:80:27:3f:19:9c:
57:67:65:6c:40:c9:a0:5f:fd:3d:14:48:7a:a6:de:8a:be:b9:
70:70:c1:7f:b8:4a:d7:13:51:65:1b:b5:04:63:73:3e:21:3f:
d1:ab:b7:c8:30:ed:96:21:ad:fe:bf:68:cd:41:fe:62:1e:bd:
3f:4f:97:d7:f4:da:db:f7:96:04:2a:75:b2:f0:ed:b4:c5:17:
6b:ee:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:33:42 2025 by rpki-client