Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: eJi5w317IH1KhMTqflk/yD5d59YH0dq0xPILndfcGXQ=
Subject key identifier: FA:D0:2F:0D:22:A7:E7:80:A8:AE:17:7F:63:3C:17:9A:0A:D2:66:E4
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 01974F32FDEC2771DB1485AF99FFF65818A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1212
Signing time: Sun 08 Jun 2025 11:00:31 +0000
Manifest this update: Sun 08 Jun 2025 11:00:31 +0000
Manifest next update: Mon 09 Jun 2025 11:00:31 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: s23xw1ZN2bilxPyzHaKnHyFkepzIvD89UiXrjlprlQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:fd:ec:27:71:db:14:85:af:99:ff:f6:58:18:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Jun 8 11:00:31 2025 GMT
Not After : Jun 9 11:00:31 2025 GMT
Subject: CN=fad02f0d22a7e780a8ae177f633c179a0ad266e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:bc:21:ba:f5:2d:02:9d:bf:32:6f:76:1b:
fd:78:85:39:97:bf:07:01:7e:c1:cb:ab:5a:bb:8e:
f4:0e:3c:40:65:e4:6d:b6:a8:1f:de:7d:01:91:02:
97:15:86:47:b0:56:5d:29:1a:ef:15:52:35:b8:ca:
4f:53:3d:52:36:c4:41:f9:dc:ba:b4:9e:99:1e:d1:
6d:5d:a7:7a:8b:a3:89:c2:46:81:1f:72:e9:c1:4a:
96:23:39:65:2a:2a:82:3b:73:4b:1d:12:1d:0b:6a:
9d:d4:81:a1:ad:d4:70:0e:0e:56:41:e5:71:4c:82:
4f:f8:e2:57:4e:b3:58:81:2f:cd:40:21:c0:a2:ac:
b7:89:af:e2:cc:2b:48:e4:e2:bd:54:25:a9:da:2a:
cd:ee:6d:a7:a1:bf:a9:3c:a9:f5:52:13:a9:72:90:
75:af:b7:21:1d:0d:9e:b5:de:61:c9:f5:d2:5a:3d:
eb:aa:5e:ae:1f:90:40:84:2f:5d:45:e9:42:0c:7a:
c9:fd:f1:5d:88:cf:0a:09:9a:fb:4e:af:61:d2:e7:
ac:65:3b:c5:19:92:cb:80:df:91:63:2f:17:a2:e9:
de:46:5f:4c:06:64:3e:a3:7b:92:b6:aa:08:0e:cd:
80:c1:d4:89:83:b2:c1:ed:dc:b2:3d:f3:34:59:31:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D0:2F:0D:22:A7:E7:80:A8:AE:17:7F:63:3C:17:9A:0A:D2:66:E4
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:68:b3:67:63:ae:5c:5f:e4:4f:0b:eb:e0:60:ff:9d:f2:ca:
cc:ae:55:ed:9f:26:48:f8:7e:51:6b:18:bf:15:5d:f3:07:99:
4a:33:3b:cb:90:a5:6a:f9:6e:65:59:6d:0b:4d:fb:15:b3:c1:
b1:d0:63:8f:3d:b5:d7:aa:cb:a0:28:e4:50:e3:a3:b5:66:10:
71:fd:86:a3:4b:cf:c7:f0:84:f9:9d:9a:09:bc:a7:9e:4b:74:
8d:0b:f5:ec:1b:84:ef:fd:b7:e4:8b:65:4b:7e:53:5d:96:b9:
28:22:e4:fc:13:a8:07:a9:07:6c:8d:94:64:4d:11:84:2d:3d:
14:df:45:ac:ed:03:dc:cc:ee:b8:81:03:74:de:29:3e:80:91:
bb:18:d7:57:64:a3:6c:2b:33:64:8e:83:0e:9a:14:2c:4c:c4:
f7:85:b6:7d:d8:37:af:cf:34:58:e6:2e:67:c9:bd:0b:6c:17:
6c:98:04:fc:21:b0:66:22:4e:af:23:70:d3:f1:da:73:7e:41:
ee:fb:fe:60:49:26:d8:db:3b:46:95:65:92:ca:73:8b:52:4e:
55:c8:9c:c3:c1:94:a0:bf:af:6d:69:9b:24:b8:39:1b:c9:34:
a3:c3:0a:9c:5f:45:f9:0f:51:d9:d8:7a:2f:60:19:86:bf:3b:
9d:7c:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:59:46 2025 by rpki-client