Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: s/dvKPGwFfbGDT4qjPZnEGEM6QzlrgyExI5ReY8eA3U=
Subject key identifier: C7:1F:50:C3:52:A4:64:34:50:A8:53:2B:1A:65:00:41:D9:D5:99:05
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0197488C5F26D5A6D780E9D7FE040E44DFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 07EF
Signing time: Sat 07 Jun 2025 04:00:48 +0000
Manifest this update: Sat 07 Jun 2025 04:00:48 +0000
Manifest next update: Sun 08 Jun 2025 04:00:48 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: cU9//JEJ4lmEurnJveE4fa+HHEYYiFyBxtZZBAz4NZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5f:26:d5:a6:d7:80:e9:d7:fe:04:0e:44:df:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Jun 7 04:00:48 2025 GMT
Not After : Jun 8 04:00:48 2025 GMT
Subject: CN=c71f50c352a4643450a8532b1a650041d9d59905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:a9:59:bc:c2:ab:d0:42:ed:f4:9b:69:8c:
83:3a:c5:09:02:b5:5f:be:53:98:7e:25:27:cf:7d:
f8:d8:9d:c2:e9:0d:13:d4:40:8c:68:b8:f2:c1:7c:
6a:95:95:9f:64:c1:bd:cf:98:a0:f6:bd:64:4c:c4:
d9:4a:45:95:97:9b:4d:38:45:25:72:22:b5:43:57:
29:08:e3:d4:c5:dd:26:ad:ea:38:b1:16:b3:a7:e2:
e6:63:25:92:ec:2b:f3:17:f5:c0:5f:e8:b1:bd:15:
bf:26:3b:a6:ac:fb:62:45:a8:b3:86:e0:aa:3e:9b:
83:a4:54:04:27:b8:99:42:04:d4:cd:af:d0:c7:04:
be:ab:fb:df:08:36:e3:68:d2:d9:3b:d7:99:32:12:
63:f3:c6:58:60:ad:63:e7:b1:97:ce:0e:f3:7e:cc:
9e:dc:5f:31:1e:69:31:3c:d1:59:a4:37:4a:41:79:
cd:72:3c:32:14:56:51:c0:81:c5:94:fa:3d:ec:c8:
3a:78:12:a9:7c:2b:4a:06:a4:9a:60:78:37:aa:d0:
c4:c1:76:ac:a7:0b:fa:56:3c:87:99:21:fb:d9:fd:
f4:93:da:f5:aa:61:4b:79:15:73:6e:e5:14:a3:99:
41:66:56:09:74:27:41:9f:80:08:76:00:f1:11:97:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:50:C3:52:A4:64:34:50:A8:53:2B:1A:65:00:41:D9:D5:99:05
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2d:01:07:ab:25:93:e7:36:16:1b:27:ad:82:95:fa:58:d5:
60:1b:30:31:bc:cf:4f:0a:f1:26:1a:73:a6:86:3e:48:63:77:
89:17:0b:98:ba:7b:62:b8:c4:1c:d6:0d:e8:35:87:06:78:20:
46:a1:05:c8:64:aa:3e:67:f2:91:95:21:7e:47:84:16:53:98:
a5:48:6d:26:55:ed:2c:de:1a:0d:9c:44:7f:04:b4:4c:0a:3d:
7f:e0:2b:b2:d8:02:ca:8f:d6:9c:fc:68:49:8e:6b:9d:5e:7a:
fc:ac:3c:9f:cb:bf:9f:3b:50:89:2d:1c:dd:d5:cd:91:1e:e3:
1c:ec:f6:36:e2:2c:58:e9:83:4d:4b:02:b5:b4:0c:75:fa:2d:
70:0c:76:3d:61:2b:ec:0a:89:8a:c4:56:dc:a6:9f:fe:93:71:
99:af:5e:85:7a:1a:53:78:26:25:1c:cb:ed:0f:ef:e5:3a:6c:
61:55:6b:17:d6:8d:f3:4e:bd:ef:e7:75:c4:db:73:3e:48:05:
2a:dd:d5:74:36:10:1b:84:be:67:b6:66:78:a3:e5:d5:6e:29:
5d:0f:7b:c1:01:a2:e3:df:71:de:c0:88:56:0b:15:64:ed:42:
3f:2f:14:03:ad:06:e9:9e:4f:68:ee:45:12:6b:1e:7e:ae:41:
36:4b:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:21 2025 by rpki-client