Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: Wb3ixMwWgr+IXo13IhdVSTg7/M5wOK9dDcyalNYEPw8=
Subject key identifier: 54:3F:DD:76:81:27:C4:B7:2C:FA:3E:6F:47:A5:5A:79:AE:AF:61:AF
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 01974A7B7F13142B0148B538E6ED7122E321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 06AC
Signing time: Sat 07 Jun 2025 13:01:36 +0000
Manifest this update: Sat 07 Jun 2025 13:01:36 +0000
Manifest next update: Sun 08 Jun 2025 13:01:36 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: cy8b78FRX1GdZ0/RZDAc6vzf4kYbjvd8VLcZVbtg4jY=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:7f:13:14:2b:01:48:b5:38:e6:ed:71:22:e3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Jun 7 13:01:36 2025 GMT
Not After : Jun 8 13:01:36 2025 GMT
Subject: CN=543fdd768127c4b72cfa3e6f47a55a79aeaf61af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:16:0d:de:c6:8a:36:aa:1f:74:84:f7:e4:
30:47:a6:b7:a8:08:16:5d:39:c9:2a:2f:d9:29:1a:
d3:e7:fc:37:6b:64:92:67:24:3c:6f:60:ee:57:4e:
91:62:30:96:0f:a5:56:94:a1:4b:81:69:08:87:56:
59:41:df:7d:07:42:98:f0:fe:f7:44:db:aa:25:50:
93:cd:77:88:de:58:8f:d0:84:60:3d:16:bb:04:96:
b8:55:9b:cc:38:49:32:7b:c5:59:ee:6b:c9:6e:60:
50:63:80:32:4f:e8:08:bd:49:6e:fb:f6:7f:b0:74:
36:af:cb:6a:fa:8d:40:df:67:82:73:15:12:91:a3:
64:d6:ba:ca:67:28:fb:ed:d0:52:9a:97:55:cd:49:
a2:6a:2e:22:b4:ba:0b:ca:dc:75:7f:3c:b1:73:2c:
9a:d1:61:07:60:3d:74:b8:ec:95:8c:3a:18:cb:db:
67:76:3d:a4:e1:30:87:63:76:02:5b:a7:93:7f:44:
a8:61:61:f2:de:8f:b0:92:8a:5d:94:8a:b0:a9:b4:
cf:b9:a2:b1:92:73:8c:38:ee:3b:c4:75:72:e1:11:
5d:43:c2:86:a2:27:2d:9b:fd:c8:07:21:24:cf:ef:
c6:36:c1:6a:9f:5b:9d:53:16:47:0a:c6:f9:67:e9:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:DD:76:81:27:C4:B7:2C:FA:3E:6F:47:A5:5A:79:AE:AF:61:AF
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:db:66:6c:e7:d1:2e:7e:c2:23:57:95:12:e9:c1:fb:5a:43:
62:29:81:69:1e:8b:ed:21:68:58:0c:92:b6:79:be:db:f6:d4:
fd:74:d6:42:cf:40:ea:79:f4:4d:8d:9c:8a:0e:b6:1b:e3:d1:
e4:c9:2c:32:12:89:e8:95:60:54:0e:47:49:55:08:c4:90:49:
3f:ac:20:2c:fa:ac:f2:79:52:de:11:21:1b:ac:eb:0a:a2:c9:
49:ed:ca:d8:20:2a:0c:08:80:a1:99:5d:2b:ba:fb:54:5f:60:
b4:70:8a:f7:aa:8c:a5:f5:46:92:44:99:e3:c9:77:0d:fb:63:
68:0d:2e:d3:4c:79:fd:56:0a:30:86:fe:6c:3d:55:dd:bb:38:
5b:10:b8:d3:1e:61:8c:7e:54:7d:5a:9c:d9:ca:81:0e:af:c5:
c6:cb:29:45:c4:4f:22:c2:48:a1:a2:00:9f:da:a0:2f:ce:a0:
03:c1:84:3c:f0:4a:ef:ce:fb:2c:cf:70:83:29:d4:2b:d3:ea:
9f:26:40:ee:4d:5a:ee:94:b6:6b:a5:47:6d:5e:55:c4:92:da:
01:43:15:a2:f7:93:86:be:70:f0:9c:40:68:76:51:a2:13:33:
cc:15:86:af:3a:1e:7f:bd:ab:cf:a6:30:72:83:70:dd:d1:f6:
56:b6:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:08 2025 by rpki-client