
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: BHrj/18p2gn+bdasXkX/5ORJ/knRphilUBlmz3+Tk/g=
Subject key identifier: 5F:B4:FC:98:D7:9F:BC:2F:54:53:7D:AA:12:2A:EA:8D:8D:00:29:A6
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019748F9F36BD0720DED6F5A02384D874D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 12C1
Signing time: Sat 07 Jun 2025 06:00:29 +0000
Manifest this update: Sat 07 Jun 2025 06:00:29 +0000
Manifest next update: Sun 08 Jun 2025 06:00:29 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: e6Jl3ndC9shO1tVrnCIFJ69O7qikbahJOV+U4DHf15A=)
2: aCQkmSTzEflyT6Hwko3Tmkp5YgM.roa (hash: cY38nbBebmnJBkoepfEX2AZ8X9a8BlXKUlC0CLvNiCU=)
3: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (hash: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f3:6b:d0:72:0d:ed:6f:5a:02:38:4d:87:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jun 7 06:00:29 2025 GMT
Not After : Jun 8 06:00:29 2025 GMT
Subject: CN=5fb4fc98d79fbc2f54537daa122aea8d8d0029a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:9e:74:0f:c0:19:89:37:b6:d8:80:b5:45:
bb:59:ea:56:94:c5:e8:a4:34:4e:44:cb:17:be:f5:
f7:7c:b4:32:ff:e7:32:90:06:1c:e7:54:06:c0:85:
db:36:dc:90:9e:86:1d:09:de:50:a8:f7:6f:98:83:
4e:a3:25:40:a1:50:53:5a:f2:da:08:30:6e:a2:db:
06:ad:5d:e9:e0:43:09:80:9e:3c:c4:20:7a:ec:10:
7c:be:34:75:74:5a:30:3d:1e:23:c4:9a:af:65:fd:
c5:eb:24:ec:65:29:13:33:3f:90:9a:e0:eb:df:f5:
ff:8f:98:5b:f4:59:a5:c6:a9:05:3f:4f:bf:89:c5:
8f:36:fd:f2:5d:94:a5:8b:e7:11:44:bd:80:33:9f:
2e:6a:78:cd:3d:d8:9d:ec:17:78:b0:d2:2f:c1:9f:
03:14:ed:9e:97:07:a3:63:f2:65:52:c6:f5:15:ff:
c2:5b:55:ad:dd:6f:5c:c7:ab:65:33:98:d5:92:6f:
c0:06:99:27:65:ff:71:5e:e0:69:ac:71:a0:45:57:
d8:03:fb:ad:5d:63:70:64:90:1f:fe:5b:70:0d:94:
dd:fd:a9:c6:6b:ec:47:0e:d7:ba:25:67:fe:8b:9f:
4a:9e:de:d3:df:3e:aa:31:23:a2:41:59:4c:d9:98:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B4:FC:98:D7:9F:BC:2F:54:53:7D:AA:12:2A:EA:8D:8D:00:29:A6
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:53:cc:b1:46:94:ef:a7:e1:91:f0:8e:29:14:95:ce:88:
5f:73:e8:9f:55:f3:0b:9e:24:ec:e3:6a:39:95:bc:b8:85:6c:
3a:13:98:b8:53:9a:94:d9:f4:ea:79:1f:d7:52:cc:19:f9:0e:
81:46:66:cc:48:48:ac:ca:11:69:49:71:ac:55:c7:1a:14:21:
36:95:dc:78:92:12:96:ea:42:be:a2:29:c8:43:3c:6c:0f:81:
22:1a:a3:e2:6f:32:3d:fa:00:ec:48:90:1b:de:04:86:3b:e3:
16:64:53:bd:b7:2f:05:89:0d:69:c9:a5:5c:d1:6c:9d:d3:c8:
55:b7:d0:46:58:6c:40:9f:49:fa:ab:3b:85:72:da:6d:9e:0f:
30:11:b8:b9:ee:1a:1f:ed:b7:56:e5:3f:cd:18:54:3a:8c:19:
97:ab:19:b1:ce:5a:21:be:b1:14:81:f3:7f:68:e9:56:dc:6b:
d3:91:20:1b:d6:bf:66:48:6c:cf:06:a7:5d:95:25:b8:26:c6:
6f:78:56:7a:d8:b2:b0:59:1f:62:5a:01:74:2f:3c:93:ae:8c:
9d:aa:bc:9a:f5:b6:14:ad:ec:8c:59:f3:65:52:66:c7:4b:3e:
73:79:a1:83:35:9e:be:46:67:b1:dc:53:dc:6d:27:58:c5:ed:
da:14:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:46 2025 by rpki-client