Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: R2n093fHIYtRrfjHB63aI9EtFBBz3A5pTpKuTeAfw1U=
Subject key identifier: 67:09:7E:AC:B7:A3:90:4B:69:88:EB:AB:FF:17:10:28:89:E1:E3:EE
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0197477A1182E163863DF57340CF2EBC9EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 0156
Signing time: Fri 06 Jun 2025 23:01:11 +0000
Manifest this update: Fri 06 Jun 2025 23:01:11 +0000
Manifest next update: Sat 07 Jun 2025 23:01:11 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: 3mOU7yqifxt5za7oJQaxUOqQZ68EYpqZTmmPtwDlRbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:11:82:e1:63:86:3d:f5:73:40:cf:2e:bc:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Jun 6 23:01:11 2025 GMT
Not After : Jun 7 23:01:11 2025 GMT
Subject: CN=67097eacb7a3904b6988ebabff17102889e1e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:19:35:41:db:e7:1b:5d:cf:a2:cd:e7:80:
7b:49:cf:9c:84:28:2b:a5:f4:cc:c9:62:b7:15:e8:
c3:67:42:98:bb:d2:de:6b:ae:19:54:51:34:e9:e2:
95:c1:dd:5e:7d:bc:00:dc:37:fd:0b:2c:a9:06:b6:
9e:10:04:95:3d:fd:88:cd:e2:88:76:5d:65:43:f4:
c8:46:0c:ea:3b:df:86:de:dd:2e:30:40:eb:62:ec:
14:21:8b:b9:55:20:20:7e:98:4f:aa:f3:4d:a7:9f:
17:73:33:a6:d9:f0:21:d3:f6:0d:21:1b:11:a1:4e:
f0:4f:aa:a3:f3:97:8f:5d:fd:ed:bc:d5:41:c9:39:
4a:14:c3:80:6d:6b:49:18:81:38:f9:f8:b7:ac:d0:
07:6d:54:07:fa:10:8a:17:af:d1:bf:cd:99:e0:04:
4f:aa:98:14:3c:01:09:74:57:e9:c2:9d:31:7c:1a:
d5:58:fe:95:c4:e1:28:fd:ee:8c:d0:1d:50:2f:1c:
32:76:f6:20:d1:3d:35:dd:53:2e:26:ca:9e:8d:50:
f0:71:76:64:5d:d0:2b:e6:6f:51:0e:86:06:cc:ec:
b4:08:db:32:51:ed:4d:fa:d4:39:d6:ac:45:5a:51:
71:5c:0f:6c:74:ea:94:0f:9e:86:5a:c5:69:dc:1a:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:7E:AC:B7:A3:90:4B:69:88:EB:AB:FF:17:10:28:89:E1:E3:EE
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:59:bb:24:f6:7f:e6:7e:ee:20:c2:5d:12:8f:eb:a1:0c:93:
65:49:ec:14:04:7c:4d:ab:e1:da:d1:d2:07:a1:a0:0b:1b:ed:
ed:e1:d2:0c:70:ae:52:0b:67:dd:5d:d7:1c:df:4a:df:de:74:
dd:7a:54:cb:5e:22:47:be:fb:98:47:ba:98:f3:52:de:6c:d0:
70:d8:bd:2f:b4:44:77:9b:a4:75:cd:ca:c7:09:58:58:d1:78:
b8:e8:ae:e9:ec:2e:e2:c5:3e:c2:4a:6e:92:2b:9c:3c:b5:59:
a8:f1:9c:c3:33:53:6a:34:27:79:dd:03:ac:e9:03:df:86:98:
2a:32:df:98:84:5a:96:17:a9:9d:ce:77:cc:ea:20:a9:97:7f:
f4:13:4e:3f:55:71:ea:ee:14:4b:b1:30:9f:41:bd:43:ae:b1:
bb:42:2b:d5:42:b0:2f:2e:30:28:56:dc:92:d0:05:a3:89:2d:
23:6e:18:2c:03:34:df:8c:68:7f:f9:ed:ba:ff:0a:2d:2a:66:
52:59:30:fe:e9:e3:b8:b3:61:9a:49:e3:29:d2:76:51:c3:19:
91:9b:fe:e3:63:33:b4:c1:17:eb:98:81:19:8a:1f:62:76:a5:
38:fd:56:b7:ec:ec:b4:0e:bc:87:ac:53:47:49:92:5e:15:96:
71:f1:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:52 2025 by rpki-client