Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: xr3QSNp8kEEP+TvvaE2uPb42mW0U1zv5PAv+2GUBKEM=
Subject key identifier: 0A:1C:D4:E0:79:09:07:D7:E0:EA:B4:98:C9:B1:C7:6F:31:14:8F:05
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01974A7B5328A8F2062ABC09B79F5546714A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0D04
Signing time: Sat 07 Jun 2025 13:01:25 +0000
Manifest this update: Sat 07 Jun 2025 13:01:25 +0000
Manifest next update: Sun 08 Jun 2025 13:01:25 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: x7rbuc9L4vj6qutsqI4Xll/2IliDAulhIzb2D6Pgajc=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:53:28:a8:f2:06:2a:bc:09:b7:9f:55:46:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jun 7 13:01:25 2025 GMT
Not After : Jun 8 13:01:25 2025 GMT
Subject: CN=0a1cd4e0790907d7e0eab498c9b1c76f31148f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:95:53:26:32:31:a8:b7:e3:48:74:17:44:
94:8f:43:31:5c:7c:62:1e:ff:32:a7:28:4d:5b:16:
26:1c:05:ac:54:f8:08:a4:2e:93:33:e5:f2:9e:c1:
51:fd:4b:f2:a9:d0:ec:3f:b5:fb:a3:55:a7:bb:51:
52:dc:24:50:46:2f:8b:4d:47:99:7a:26:b4:7c:92:
7b:97:7d:d6:fa:28:9a:01:f4:b8:39:41:ae:78:82:
42:3b:09:0b:8d:36:03:0a:1d:63:21:89:5c:a8:12:
02:46:79:c9:fe:bc:4e:0d:98:d8:c4:63:75:65:71:
89:2b:df:2b:9a:e7:13:10:45:07:a7:48:69:78:d4:
6b:ff:03:f6:76:12:23:6c:77:b4:7c:ef:7d:f5:6f:
30:44:d6:f0:4b:53:46:72:87:53:c1:08:f4:84:0b:
51:d2:5a:01:9a:25:34:3e:c2:7e:2b:72:90:5e:a3:
11:7f:e8:57:de:4a:8e:bd:5b:2d:29:9b:64:e2:62:
7e:1c:c7:1c:0b:85:84:99:f6:89:76:ad:34:1b:20:
53:5f:43:58:54:88:db:c9:fd:02:88:4e:60:c8:67:
bb:8c:7a:28:8e:84:58:c9:61:ca:84:16:61:c1:46:
ca:21:75:b0:0e:27:5b:34:1b:c7:66:a9:fc:f2:d5:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:D4:E0:79:09:07:D7:E0:EA:B4:98:C9:B1:C7:6F:31:14:8F:05
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:97:21:1c:46:e8:40:ff:94:54:6c:c1:d6:45:50:d9:e4:6c:
17:40:99:d5:e9:fc:72:78:8f:6f:75:d8:ac:ed:ac:8d:ee:c2:
7f:8d:e4:45:c0:d5:67:f4:76:da:f8:54:1f:44:c6:49:b0:89:
53:c4:ea:b5:a4:87:e4:69:58:c6:ab:58:44:fa:ad:48:df:b3:
25:68:a4:2b:69:b3:af:ac:5a:ad:8c:e9:8b:13:c0:76:35:1f:
ed:7c:63:ca:36:30:bc:65:50:08:2d:92:89:76:c4:aa:74:8d:
58:cb:e9:86:75:ad:f7:e4:a2:a0:76:78:b7:75:8e:ed:57:6c:
6e:90:27:5f:98:c6:10:98:c6:50:d3:ca:68:84:0a:5d:46:d8:
56:6e:10:7f:b8:86:ed:e8:b7:b6:ff:bf:b3:c6:c1:18:98:81:
82:21:7a:94:89:fb:24:54:cc:91:96:db:c6:ee:54:c4:cf:c1:
0b:e7:2d:d6:ff:1e:1c:2f:e0:cb:60:5e:7f:0a:cc:a0:2b:65:
5a:30:be:80:7c:54:2c:5b:26:83:e8:bb:0f:df:77:e3:32:eb:
b8:37:cd:e7:55:cb:1a:28:83:6a:de:aa:cf:5c:e0:f8:86:2a:
ec:1c:38:55:67:85:0c:43:49:7c:e9:cc:9f:49:58:11:0a:c9:
e6:1a:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:17:37 2025 by rpki-client