Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: x7EmSvyfcs9BB3XRmgfwbDdSc3cPeCqr+m7vH9cKQRY=
Subject key identifier: 63:03:3D:1F:84:7F:78:0B:6F:DE:66:BF:5B:B8:AD:29:4B:13:84:27
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 01974D0DE2EF3C0F7C499F0B543FAE4FEBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1592
Signing time: Sun 08 Jun 2025 01:00:44 +0000
Manifest this update: Sun 08 Jun 2025 01:00:44 +0000
Manifest next update: Mon 09 Jun 2025 01:00:44 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: JqlsR0ccb+Ull/5oElV/B8Cdj2XkhiZXdgtyZmoch2A=)
2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e2:ef:3c:0f:7c:49:9f:0b:54:3f:ae:4f:eb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jun 8 01:00:44 2025 GMT
Not After : Jun 9 01:00:44 2025 GMT
Subject: CN=63033d1f847f780b6fde66bf5bb8ad294b138427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:20:5c:11:97:8d:35:4d:89:30:87:b4:e1:
19:3c:80:fe:1d:96:1a:ef:68:9e:89:c9:54:d7:4d:
79:2a:07:98:97:1d:11:13:92:ee:a3:b0:2c:e8:e6:
d8:8c:eb:1d:31:bb:06:ee:1e:b7:70:90:dd:e3:8c:
26:f0:f4:32:3b:d8:e8:b7:ff:cb:c7:4a:0a:3a:e7:
c5:54:e5:34:ba:67:27:48:c0:c6:3d:cd:a8:64:98:
78:2e:4f:44:e9:cc:2b:2c:97:bd:6f:ca:8f:88:7a:
a4:97:e2:e1:68:9f:55:08:7a:3c:03:75:79:a8:f0:
19:8c:2d:33:3d:0f:9e:ab:fe:65:1a:db:40:f2:36:
9d:6c:ee:92:05:35:31:b3:41:73:72:7b:d2:ee:2a:
60:89:83:ba:bb:59:b9:86:b3:f0:da:83:38:51:95:
dd:a9:11:9c:0d:23:8e:bc:46:c1:68:c7:e0:f7:d8:
14:95:1e:1b:c4:39:70:06:a2:88:7f:eb:1f:77:c0:
ab:4e:d1:6a:98:2a:11:bb:8b:b0:1f:ba:42:a2:85:
18:9d:cb:ae:71:73:fd:14:3a:05:29:40:09:d1:c1:
0c:64:d5:8f:40:51:27:fc:6a:c0:d6:63:fe:1e:a3:
13:b2:10:9a:23:b7:9f:e2:c4:91:b0:32:48:40:c6:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:03:3D:1F:84:7F:78:0B:6F:DE:66:BF:5B:B8:AD:29:4B:13:84:27
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:5f:cd:fe:fb:aa:98:d3:16:d7:fb:a5:33:a1:63:02:58:
18:44:b1:8c:f2:24:af:7d:2a:28:7b:b0:4e:c0:4e:44:28:22:
23:f9:77:60:60:aa:d3:c4:b1:ed:0f:9a:6a:ce:ca:ac:53:fc:
4d:fd:7f:8d:da:1a:9a:ac:d4:36:fa:8c:19:de:6a:f8:d7:ed:
31:80:12:c7:6e:90:0d:b8:64:47:bd:ae:90:36:5a:08:ed:fb:
58:43:9c:cb:09:f0:06:d7:e6:b3:61:79:df:29:28:7e:97:8d:
20:d4:74:dd:91:a8:c5:85:f0:13:e8:b8:a4:f9:e2:b3:bb:83:
d5:ef:86:60:b5:55:61:1a:6b:a4:6f:8a:2b:b2:f5:6e:87:f7:
a6:39:b6:89:47:0d:ee:62:65:61:93:ec:6c:ec:39:74:0a:da:
2e:fd:28:c7:b8:ad:41:d2:fb:9e:f6:3c:22:aa:7f:9c:0e:28:
4c:69:d4:bc:b5:5f:a6:32:e8:7a:88:2f:e7:a3:b7:0b:21:f1:
b1:1f:b1:4f:c7:60:df:bc:c8:0b:3e:8e:77:55:5f:49:f1:7b:
ab:ec:7b:de:0c:2f:51:cd:e3:60:90:e1:de:d7:46:7c:24:01:
3a:ef:dd:32:51:ce:71:cd:74:2d:ff:d9:d7:52:b9:f8:43:ee:
de:0b:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:20 2025 by rpki-client