Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: 0mYLnuCa630SDcQtiOGHdXfWBfRnB+ejmHVgD/zbJSE=
Subject key identifier: 67:CA:7E:DC:06:42:3F:C7:F3:65:62:8B:A0:1B:75:70:00:DD:D2:8E
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019748F9E97EF6755B52D6751C8B56B3D966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 0E7C
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: n3Cxaw13pAaSQQ5uVeUepfMqzR682yj3cuDZo1XycmE=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e9:7e:f6:75:5b:52:d6:75:1c:8b:56:b3:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=67ca7edc06423fc7f365628ba01b757000ddd28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:82:d0:4b:13:24:fb:88:eb:58:60:60:7b:
7e:a3:e9:d1:19:47:8e:b9:d2:59:1b:93:01:a9:34:
e5:80:4a:a7:53:2c:8a:0e:94:4f:20:d5:67:2f:24:
99:46:da:64:77:4d:a4:51:4e:2e:75:81:b1:06:ea:
3a:05:9b:66:c1:9b:23:ab:a8:38:62:e5:f3:0b:d4:
a3:55:d7:0a:76:74:9b:c3:52:00:50:cc:dd:79:3d:
68:d2:a1:c9:81:d8:cd:ac:a9:c0:fc:41:fd:bd:e5:
05:da:c8:30:85:06:a2:83:66:bd:63:a9:11:e5:21:
4e:d8:8e:05:24:ba:f7:24:f3:6f:df:e9:80:c7:f8:
1b:06:8b:67:51:a0:3c:d4:e3:1a:41:55:f4:6b:4e:
31:a5:a1:91:19:2b:ed:a2:9d:28:b0:ac:8d:48:cf:
c8:87:6a:c2:fc:d5:06:89:a4:8d:04:ee:e3:0d:66:
6a:82:e0:0e:73:89:5f:54:ee:c9:bd:4e:f1:2f:2d:
4d:77:8c:a0:76:52:ba:40:16:55:8f:68:06:67:6f:
2d:54:af:78:8d:85:c7:55:72:bd:a8:a4:9e:7a:b1:
bf:0b:a8:ea:7b:f4:53:c9:b4:c9:be:de:84:1c:6c:
a8:82:53:0f:de:04:f9:13:5d:8e:a1:06:ba:0a:68:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:7E:DC:06:42:3F:C7:F3:65:62:8B:A0:1B:75:70:00:DD:D2:8E
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:38:66:fa:ce:87:13:b5:8e:83:0a:ac:f0:79:3e:0f:0a:5a:
e7:ef:9a:da:12:7b:8b:53:51:a9:27:52:11:db:1a:21:a4:9d:
a1:02:81:a0:36:2b:d4:52:d7:de:dc:13:b2:25:55:84:75:ca:
3c:d2:71:b9:83:57:9c:89:30:a7:35:b2:01:50:1b:b5:31:f3:
fc:30:30:1f:78:59:6f:60:10:8f:af:4d:ac:2a:11:24:2f:aa:
9e:59:87:e2:a7:31:ef:15:1b:02:1d:43:1a:fc:b6:c9:85:ed:
ff:15:d1:35:d3:f4:3a:da:5a:56:ec:81:3e:ec:58:35:96:f0:
76:53:1d:b2:bb:91:e8:54:33:38:0e:53:de:90:85:18:09:6d:
46:73:0c:34:80:34:b1:17:08:5d:a5:e3:8f:cd:18:cb:bc:18:
15:da:25:0b:98:87:cb:2c:0d:31:fc:6a:3b:f7:de:2d:2d:38:
61:f2:9b:4d:06:7f:1c:0e:4e:93:09:96:1e:ef:6e:24:77:3a:
76:3c:21:f9:99:b0:e3:54:38:07:29:34:27:2a:3e:6a:d9:71:
ad:6b:37:d4:fa:23:3c:04:de:9b:2c:87:d0:6f:db:14:e4:d2:
0e:47:a7:ca:64:a0:96:59:a7:9a:bd:11:36:dd:fc:c9:7c:4b:
0e:43:37:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:35 2025 by rpki-client