Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: Cqg70tdQqGOF4zBkvIuXO+EWZPK7AfFN/6PBRLRKftc=
Subject key identifier: 8A:80:25:61:BE:69:27:03:47:EC:41:AB:1E:9D:A1:7A:F5:7D:7D:1E
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 01974D44A3ADB0FF875DD9697374E2A86436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 02:00:33 +0000
Manifest this update: Sun 08 Jun 2025 02:00:33 +0000
Manifest next update: Mon 09 Jun 2025 02:00:33 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: WXfQo8HQbQtIRHiDmm3V+1sKe5Ay7pMbDtMB/2S9kKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a3:ad:b0:ff:87:5d:d9:69:73:74:e2:a8:64:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jun 8 02:00:33 2025 GMT
Not After : Jun 9 02:00:33 2025 GMT
Subject: CN=8a802561be69270347ec41ab1e9da17af57d7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:23:23:68:00:4a:2c:09:18:da:36:f0:06:
1b:a1:d6:29:b2:1e:72:ff:8a:2e:de:4f:67:e9:9f:
df:58:57:13:21:7e:23:80:bc:c6:64:90:ef:40:f4:
30:8b:43:a9:93:6b:6f:7e:80:ed:0f:58:a1:b1:f7:
d0:ba:4b:a6:e3:b6:6f:9b:a9:d7:9c:01:9b:e2:53:
bb:eb:3d:21:46:aa:49:01:2a:cb:35:d7:56:3b:33:
f4:79:ac:f6:8f:a4:86:b9:f3:6b:dc:0f:84:43:87:
1f:f7:b1:63:e1:80:e3:53:ca:84:96:0b:3e:df:b5:
d3:a6:c8:b0:95:be:3f:b9:d9:77:e7:35:96:23:b0:
5f:5b:87:e0:89:1c:6c:93:0e:c9:63:94:b2:4f:a9:
0c:27:88:58:b7:08:53:ea:33:af:97:f6:75:26:95:
31:ee:79:86:f4:10:cb:3a:ff:46:9e:12:e7:5d:5e:
70:28:aa:0e:cc:dd:0e:81:e3:3f:ea:54:a8:2a:77:
51:37:a7:88:58:ba:7a:54:25:c1:4e:0a:1b:04:38:
4d:71:0a:bb:42:c2:f0:3c:34:ee:28:26:61:40:05:
ec:f3:7c:ed:a3:ce:c7:ad:e9:0b:67:f8:16:98:10:
bb:39:e8:82:75:7c:ab:d8:cf:aa:27:85:7a:73:b7:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:25:61:BE:69:27:03:47:EC:41:AB:1E:9D:A1:7A:F5:7D:7D:1E
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:03:1f:f7:69:28:99:03:56:f1:59:58:75:ab:6b:f4:8d:e3:
1b:a8:49:67:ec:c9:26:a3:81:03:69:d4:38:b3:61:de:01:f2:
c1:19:e2:fe:06:a7:5b:23:b2:86:f2:0d:af:3a:15:ed:f3:53:
6d:41:f8:de:ec:56:85:4e:f6:ef:06:0b:49:6e:cb:0c:cc:0b:
0e:ab:c6:f0:c5:e9:2d:f6:ee:ca:04:e6:0d:62:6f:d3:76:c9:
d9:cb:52:86:4d:9c:9c:a5:76:d2:84:f9:f4:29:75:e7:a4:b5:
83:ea:80:24:47:0c:b5:05:7d:e3:05:2d:43:6f:39:a9:a8:97:
4c:c6:eb:4b:da:3b:5a:bd:68:f9:0a:76:67:db:e5:e2:5a:a5:
27:6e:4d:98:f7:04:d2:41:a4:de:8d:bd:77:96:11:ab:36:5d:
07:59:25:8e:c1:96:5b:92:f1:36:51:39:51:d7:a5:d2:61:48:
ea:39:cc:38:34:94:e0:50:41:fe:84:87:35:0d:6c:92:2f:09:
c7:8e:20:4f:27:f3:da:6f:a3:c8:ad:ba:32:ee:17:38:ac:17:
e5:3b:5c:61:a9:1b:1a:98:0f:8f:3b:b8:5a:58:ed:03:02:b9:
4e:fa:98:57:5d:ef:b9:44:c5:86:a5:aa:d6:35:cb:8e:42:42:
12:49:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:17 2025 by rpki-client