Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: G/C+lLZHogqtP2BBTj968lCVQXfnIM9wAHW8tR0vKmw=
Subject key identifier: B5:7F:F9:FD:15:7A:92:3D:44:82:B0:B9:92:96:10:3C:32:44:7D:1E
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 0197493136AF1A910676E1A7398B3B91EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:00:51 +0000
Manifest this update: Sat 07 Jun 2025 07:00:51 +0000
Manifest next update: Sun 08 Jun 2025 07:00:51 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: M+M8PQTqbAE6Q30BvxHI7Ok67o8erD+ypY/JVkgtO94=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:36:af:1a:91:06:76:e1:a7:39:8b:3b:91:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jun 7 07:00:51 2025 GMT
Not After : Jun 8 07:00:51 2025 GMT
Subject: CN=b57ff9fd157a923d4482b0b99296103c32447d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:03:55:38:4a:8d:98:e4:e5:1c:e6:d1:c6:
ff:65:85:70:11:3a:ca:75:82:c1:84:17:1f:86:04:
54:b9:cd:76:01:26:14:03:38:13:58:73:d8:51:93:
fb:04:ed:5c:6a:fe:d9:9b:b6:45:dd:e3:e7:27:2d:
fc:db:4c:bb:d6:81:79:b4:9a:06:5f:77:6e:70:9f:
62:1a:07:4a:1b:fa:3d:78:85:0b:54:6c:4f:c2:f6:
42:2d:70:b0:16:89:84:f2:1c:68:26:94:b9:11:fb:
33:02:b9:80:e5:e2:34:79:94:ac:ae:c3:c7:23:cf:
02:fd:20:64:f3:12:73:0e:39:7b:7c:20:ed:5b:3d:
e3:bc:35:04:dd:71:05:88:34:6f:44:bb:99:82:fc:
5f:a3:41:03:69:a4:0d:3e:2a:1e:5c:5a:f6:fc:a4:
88:f7:da:fe:1c:d5:52:61:b5:b4:21:8f:eb:cd:6a:
c6:77:74:9a:e3:99:0f:6d:11:a1:30:96:60:5c:7c:
a7:33:1a:b9:a6:04:df:d0:c4:50:e4:07:a4:9f:a9:
a8:b1:06:16:54:1a:d6:2d:69:64:fc:70:cf:e8:5e:
9d:51:07:c6:9e:4c:83:ae:1a:a7:78:d4:c1:45:51:
00:f9:17:df:c4:b6:66:d0:37:49:a8:fc:e5:05:1d:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:F9:FD:15:7A:92:3D:44:82:B0:B9:92:96:10:3C:32:44:7D:1E
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:bb:cf:10:5d:44:43:83:d1:18:00:fa:b2:5f:5e:cf:6f:
0a:13:66:40:98:1d:ad:31:ad:85:37:95:46:dc:63:e3:56:9d:
18:94:77:c5:cc:51:d8:d1:08:4d:9f:a2:19:2b:38:2e:14:b4:
cf:bf:f7:31:da:8d:0b:6a:f8:b0:20:72:de:b4:95:9a:77:55:
38:58:ab:87:f1:d4:0f:19:06:af:40:de:df:a2:98:99:bd:85:
29:45:60:e2:80:ad:e4:20:7d:f9:91:7f:1a:24:0e:c6:9d:9b:
04:6f:89:86:82:e6:a3:f8:64:7e:91:f5:d7:d5:d5:34:81:f6:
a0:21:f9:11:5e:f6:05:ce:fc:26:f5:98:37:2f:8f:48:de:28:
1a:ac:34:c4:97:33:7c:cf:e3:34:a5:46:1c:5f:99:c3:00:30:
89:07:db:28:84:6a:da:68:e6:40:84:39:5c:dc:cf:d6:48:9c:
70:b6:fd:56:6c:f9:6a:77:27:27:d4:c4:de:10:ee:9d:9e:14:
eb:23:6d:49:88:db:1f:82:47:cb:42:e3:65:d3:bd:0a:34:9b:
eb:d5:b6:f7:93:55:a8:dd:c7:49:1c:1d:65:80:19:5a:bf:0f:
e9:72:9f:d8:42:ac:83:7d:d0:e0:92:68:b4:0c:04:f3:88:a7:
6a:30:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:34 2025 by rpki-client