Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 1T9/LXrw+rbwhq8HU52O5P9ul054Bsaj3r6KOMVlTAk=
Subject key identifier: 71:20:F4:27:D2:9A:DF:70:C7:D5:A7:A8:87:0A:5A:8D:FB:FD:A5:33
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019747428B271BCD2FE2002CB199570CA36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 22:00:32 +0000
Manifest this update: Fri 06 Jun 2025 22:00:32 +0000
Manifest next update: Sat 07 Jun 2025 22:00:32 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: cyh/ojW8pLis3rY/ngKkGWR5SvhG+UPcXqD/uQKSoWY=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:8b:27:1b:cd:2f:e2:00:2c:b1:99:57:0c:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jun 6 22:00:32 2025 GMT
Not After : Jun 7 22:00:32 2025 GMT
Subject: CN=7120f427d29adf70c7d5a7a8870a5a8dfbfda533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:35:36:22:be:5a:0a:6b:dd:57:ed:d3:3b:
0f:d6:fc:0b:3a:c7:49:8f:42:d8:4f:3a:aa:c7:74:
7d:bc:e7:46:29:52:c5:eb:74:fa:da:56:6a:7e:59:
9b:e8:fa:88:02:25:60:f4:10:ec:0d:f1:2f:a7:47:
22:e2:f1:00:e1:aa:bd:53:70:c6:1d:6d:92:c1:f3:
04:70:69:ad:c9:32:c2:0d:45:5f:fe:58:e5:7a:7c:
a1:46:a6:c1:92:9f:02:02:4f:bc:6c:49:e7:a7:51:
7b:cd:8f:46:98:cb:6b:2c:4d:26:5c:3c:a5:f6:f3:
2a:7d:6c:54:8f:91:c8:02:2d:39:df:ec:f1:2a:15:
57:b2:ad:be:2e:c1:bd:b6:36:7d:24:f8:01:e0:83:
5e:62:3a:07:ed:d0:91:ed:5f:4f:3b:ef:aa:07:92:
bb:c2:3c:e2:bc:65:c4:5b:f6:f8:97:ee:f2:fe:0a:
50:46:e4:09:66:d4:cf:cb:8a:d2:d5:8b:0b:81:cc:
55:6a:e3:65:4f:43:31:4f:15:8f:51:15:7a:bc:17:
06:63:3e:2b:0f:21:1e:42:a0:95:b7:db:c0:16:99:
58:6c:ac:e6:dc:87:10:c4:81:d7:b9:d6:e0:d6:8d:
93:51:fd:bd:85:9c:b7:4c:c5:21:90:b2:70:04:3c:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:F4:27:D2:9A:DF:70:C7:D5:A7:A8:87:0A:5A:8D:FB:FD:A5:33
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:1f:bf:f1:99:b9:9d:b9:f0:63:0d:00:41:c4:1a:65:84:
63:e3:48:71:10:4d:d3:78:b1:13:a6:1e:8c:d4:83:4c:40:87:
71:d6:66:f0:62:85:4e:61:29:36:21:22:81:1a:e9:6b:7a:84:
cd:8f:8b:2c:fa:7a:93:27:69:f3:c3:16:68:3b:50:98:57:62:
c2:0d:27:0a:a3:ef:93:3b:59:ce:4f:fc:89:1d:28:3a:6b:51:
63:9f:66:47:49:43:b0:43:7d:a4:55:64:3a:36:7e:f7:c0:a9:
3d:ad:32:39:fc:5c:f2:9d:5a:2f:96:0f:4a:74:86:e6:e4:b7:
54:76:08:ab:de:79:34:9c:23:5f:db:3b:cf:8f:61:13:f2:24:
34:c2:1f:d9:d5:cb:ce:ac:ba:ee:40:92:e9:60:c2:7b:c3:73:
1d:9b:33:d4:24:5c:a0:a2:85:e0:4d:4b:7f:ea:99:aa:6c:dd:
53:58:bc:88:46:a0:ea:ee:31:81:30:7a:d9:3c:52:52:4d:e8:
14:2d:14:27:d1:f1:c0:fb:e6:ae:46:fe:5b:25:a4:6a:11:9e:
48:4a:dc:30:12:6f:49:11:77:89:a1:9f:24:90:55:a3:e1:2d:
4d:1d:dc:94:6e:4d:af:ef:c3:0f:0d:0f:05:2a:24:2f:c3:4f:
10:d2:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:32 2025 by rpki-client