Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: qZaX4fYzwPNwrs/vk0Y8xl5VfUiDXiS4JbduoNtR6QY=
Subject key identifier: 4A:68:BA:A3:63:E1:13:5E:46:55:7C:F6:22:77:50:EB:65:2A:99:EF
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 0197470C725CA3326ED87F13B18D704869FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 1278
Signing time: Fri 06 Jun 2025 21:01:27 +0000
Manifest this update: Fri 06 Jun 2025 21:01:27 +0000
Manifest next update: Sat 07 Jun 2025 21:01:27 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: AnoCTQXr06WInL6IwSokvHjXoyg2UEV3E8i8ZO3hpMw=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:72:5c:a3:32:6e:d8:7f:13:b1:8d:70:48:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jun 6 21:01:27 2025 GMT
Not After : Jun 7 21:01:27 2025 GMT
Subject: CN=4a68baa363e1135e46557cf6227750eb652a99ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:81:10:5b:d0:d9:1f:4f:b1:3a:8f:66:88:a2:
ac:cb:c0:84:83:c7:a5:8c:c7:39:42:fc:5a:f0:d0:
c8:35:ae:e8:85:6c:8c:2e:71:d4:f7:d8:43:92:25:
08:83:31:a6:96:1a:7a:83:11:c7:b3:70:3c:27:cc:
d6:42:ce:b8:be:75:5c:11:00:eb:5d:b7:42:82:ec:
f3:43:66:a3:70:75:c7:e4:c9:34:7d:64:48:82:df:
f2:e7:d2:69:45:05:2a:f3:72:a7:17:7f:ba:ba:b2:
2f:9b:57:a4:06:55:db:7c:21:6b:59:b1:23:d5:e8:
19:49:ae:d4:c9:ac:db:df:f5:3b:4c:15:ff:de:66:
2c:7a:b0:91:19:58:97:ec:5d:8c:ed:98:53:99:15:
8e:b4:7f:4a:67:28:5e:91:66:c7:20:c1:da:2a:44:
c9:7d:9a:27:f5:d0:99:de:11:1d:71:93:c9:ea:ad:
ad:b8:73:0d:57:79:c7:9c:b9:dd:fc:32:40:1c:42:
2d:21:18:e6:f1:f8:1d:33:ce:68:23:78:85:19:76:
29:fd:67:d8:2d:a0:65:92:e5:51:21:2b:8f:82:f9:
f2:aa:ca:af:9d:21:b7:97:35:0e:75:99:e8:99:43:
ba:0c:20:5d:ef:cb:1d:4a:61:df:df:d7:58:84:c4:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:BA:A3:63:E1:13:5E:46:55:7C:F6:22:77:50:EB:65:2A:99:EF
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:83:6c:79:ab:f1:a5:ce:ee:4f:f8:b7:a3:3b:3a:d3:3a:
c4:ba:fd:4d:b5:01:78:fd:e0:f1:c3:51:61:06:f9:41:d7:79:
97:7d:08:cb:c8:e6:c3:77:93:7a:fc:03:cb:78:85:1c:df:52:
6f:f4:35:db:fb:3d:9a:29:45:64:f0:0d:f2:30:ef:18:d8:88:
1a:15:eb:d1:a4:cf:3f:0e:14:d7:2a:bd:4d:c2:95:ad:e9:f1:
6b:e3:80:9a:80:7c:a6:d9:d7:8b:da:cf:fe:6c:5f:b8:5b:d8:
d8:5d:c6:61:f9:c9:55:ac:f0:70:6b:37:65:55:cc:93:bc:6a:
74:c4:2d:79:6a:e4:73:61:90:6f:84:5e:63:9d:df:de:3c:52:
fc:b9:c1:4a:e5:3d:00:6e:cb:40:11:90:27:d0:0f:1b:95:f4:
77:a1:ca:d4:0b:ca:c0:d5:91:6f:b8:70:32:ea:1f:02:c1:2e:
d5:20:51:ee:b9:92:24:fb:75:79:1e:26:ed:19:10:84:25:f4:
87:87:e5:fb:d9:24:4d:99:61:d1:89:6b:b0:f4:9a:fd:29:3c:
e7:9c:0f:f7:7d:f0:36:0e:68:ec:6a:43:ec:53:fa:2d:dd:85:
8d:d2:bd:8b:09:93:29:a4:ee:c8:24:d9:93:49:be:f5:54:d6:
b9:5d:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:20 2025 by rpki-client