Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: AXcnLte6z8qZ6H+jKZyin/ZnaPJAzKWFLCzZdUryfkk=
Subject key identifier: F5:FE:77:5F:31:96:AD:CF:6C:48:02:F6:4F:B2:A4:24:CC:14:39:51
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 01975911EFD136F5E5778A369F01874B7243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0508
Signing time: Tue 10 Jun 2025 09:00:37 +0000
Manifest this update: Tue 10 Jun 2025 09:00:37 +0000
Manifest next update: Wed 11 Jun 2025 09:00:37 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: Z084h7kq8Vb0GweyYCvh9AugQonWH1GQ2biDgBWj134=)
2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:11:ef:d1:36:f5:e5:77:8a:36:9f:01:87:4b:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Jun 10 09:00:37 2025 GMT
Not After : Jun 11 09:00:37 2025 GMT
Subject: CN=f5fe775f3196adcf6c4802f64fb2a424cc143951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:51:89:3f:2a:23:55:cf:56:ee:db:84:4d:
e1:e2:28:fc:85:72:88:ed:34:58:8f:fb:52:80:0c:
2f:f8:28:6d:a9:46:37:43:1a:f5:33:54:49:1b:6b:
5b:1e:ab:66:67:46:96:be:41:d3:b5:af:79:a2:0e:
b5:9e:ba:f8:9a:b0:1b:dc:70:61:d5:d7:18:74:39:
cd:8b:8a:4f:33:c9:6d:aa:9b:4d:50:90:a5:46:7f:
99:50:db:3d:1f:0a:65:92:a1:1c:b2:87:f8:65:76:
87:8e:73:29:04:60:cf:08:93:1e:66:a8:7b:26:b7:
30:ca:65:2c:73:d8:62:d3:02:1d:27:48:18:7e:77:
32:ac:40:80:fa:e5:12:c3:99:80:ae:bc:ef:7b:d4:
90:46:85:06:3e:83:8f:f4:7f:33:8b:8b:31:0a:57:
d5:11:75:d9:93:12:a6:39:ac:93:ac:1c:ca:d0:8e:
0c:56:aa:f8:af:15:8c:51:85:6f:e7:6a:8d:fe:d0:
ec:42:bb:be:6d:ec:85:80:cb:40:0c:dd:b5:fc:5a:
4d:75:8f:92:e5:29:1c:a1:a3:1a:ef:63:f8:f3:b0:
3f:e6:7d:af:3d:fc:35:b7:be:c9:37:d6:d7:64:0e:
49:0a:98:a9:f9:91:9e:8a:d8:06:14:38:a3:b3:9d:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:77:5F:31:96:AD:CF:6C:48:02:F6:4F:B2:A4:24:CC:14:39:51
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e7:a6:69:00:4a:d1:45:46:f7:d1:3d:3b:56:49:61:ba:aa:
e1:2c:d6:3b:9f:cd:c0:1f:18:f7:b0:30:7b:d7:d3:68:5c:8e:
13:b8:b7:05:8c:ce:29:36:8d:44:a7:6c:6c:af:2c:2d:18:57:
d1:42:51:f8:cf:29:f3:82:68:36:ab:5a:80:4b:48:f9:f8:ae:
80:90:34:78:f2:a6:d7:42:5f:94:58:ae:e6:dd:e3:b4:f8:e1:
c5:10:2c:39:95:0e:43:a5:1b:5e:b7:e8:a8:b8:d9:f0:71:85:
41:ac:30:25:99:a8:9f:c4:f4:02:eb:3c:34:38:e6:79:ac:c6:
2a:b2:a1:c6:f0:24:13:68:3e:9e:8a:fc:ae:a6:dc:e7:05:13:
4a:9d:e9:f6:7a:3c:95:40:4f:a5:2d:7a:6d:19:90:ed:19:6b:
c7:cb:31:4a:66:1a:6f:d3:c3:8f:38:2f:0e:34:12:0c:97:54:
68:23:1b:56:de:28:2b:f2:58:15:cd:11:5e:68:0a:2e:17:3e:
5b:e8:4c:ac:75:59:ae:7f:a0:8c:bc:2d:cb:72:02:57:8b:55:
9c:8c:bd:88:a5:7c:f1:18:8f:00:68:06:c0:ae:eb:eb:0c:b0:
64:50:e2:36:9b:4c:91:8d:d3:fb:52:ce:33:79:98:3f:c5:a4:
30:9e:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:08:25 2025 by rpki-client