Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: 2hBIR78lEcXdWZ99EbmOHcir0H5afKumaItmJdGgSzc=
Subject key identifier: 54:F1:D1:A0:7B:1A:38:F6:41:5A:C9:8C:65:0A:8C:DE:F8:B2:47:3B
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 01974AE8B3CB1976BFD560B08C0DCBC19EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0CEB
Signing time: Sat 07 Jun 2025 15:00:53 +0000
Manifest this update: Sat 07 Jun 2025 15:00:53 +0000
Manifest next update: Sun 08 Jun 2025 15:00:53 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: Z/S6pdAuoGR22o7QhQtIzisaxm4givsDc5M3VKelA4k=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b3:cb:19:76:bf:d5:60:b0:8c:0d:cb:c1:9e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Jun 7 15:00:53 2025 GMT
Not After : Jun 8 15:00:53 2025 GMT
Subject: CN=54f1d1a07b1a38f6415ac98c650a8cdef8b2473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:4f:af:9b:93:5e:af:f6:02:ea:3d:44:e5:
c7:0a:5e:04:21:3d:c6:65:ec:74:71:8d:e2:fa:ef:
1e:9d:6a:b2:3e:3f:54:70:7f:43:c3:1a:61:d6:c4:
8e:59:6e:22:6f:ce:95:a0:7d:40:4b:9e:be:0a:74:
eb:b5:91:33:59:93:14:01:55:f0:9e:99:6b:e9:8d:
d2:83:a8:65:f8:bb:22:90:1e:55:27:60:9e:c1:fc:
45:61:5d:e8:29:9d:6d:3b:90:b5:be:06:af:91:d5:
e4:6b:b1:89:97:03:7a:a9:74:59:c3:03:8c:4b:15:
b7:37:ac:79:b3:d4:0b:db:d1:a2:09:5e:ee:c2:92:
2a:0b:0d:2c:91:48:e7:8a:63:76:53:2d:05:35:94:
c5:44:fc:30:87:ab:1a:f6:df:fc:df:d9:8d:b3:75:
e5:c5:35:bb:9a:43:ca:ee:e1:c2:d5:d0:f7:14:af:
26:c9:a3:e1:fd:9d:d9:fb:d6:a2:03:0c:4f:be:e4:
5f:8f:32:27:ba:58:9d:0e:dd:f1:d8:d9:20:36:17:
00:8f:e2:46:04:39:0d:8c:c2:3c:ec:33:08:0e:81:
f7:79:e6:82:1c:4a:54:35:2d:9e:6c:f6:e5:b8:24:
da:34:9f:b1:88:cd:b0:38:db:2f:3b:ab:1b:9f:d7:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F1:D1:A0:7B:1A:38:F6:41:5A:C9:8C:65:0A:8C:DE:F8:B2:47:3B
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e0:fc:90:58:77:82:fb:de:d8:ba:e6:3c:24:44:8f:90:0c:
80:f0:0d:a1:fc:33:3e:f7:a2:ad:8b:b0:d9:0d:44:53:47:44:
cf:57:17:e0:9d:1d:e2:d7:4e:ce:5b:fe:ac:90:d0:03:0e:a2:
24:e8:c7:34:cf:21:25:ab:91:d2:a4:31:43:23:43:11:15:a7:
44:31:8d:2b:b6:4b:6a:28:66:d8:ec:08:66:03:0e:cd:e5:52:
86:67:3d:f8:c7:5c:6c:56:85:c7:be:e6:52:30:06:54:7b:bf:
14:1f:ee:39:85:08:be:b3:3f:83:cc:a4:7d:c8:2a:9f:6f:b3:
da:97:fe:b4:3c:55:c7:e9:97:06:de:3c:59:7d:53:f6:14:16:
07:ee:d3:74:4f:96:2c:f8:06:de:f9:16:fc:58:74:88:38:ea:
86:60:95:85:f7:6a:d3:82:19:ef:f0:5a:1a:45:3d:3c:cc:88:
96:93:0a:73:57:65:df:f2:4a:91:53:7f:b4:cf:8c:dd:32:89:
c3:0d:4d:e3:db:2d:fd:02:17:f0:20:b7:cb:be:c3:59:35:85:
a0:fe:21:40:2e:c3:22:02:01:17:fb:aa:b0:34:05:cc:4b:fe:
88:17:6b:c6:81:c7:a0:57:2c:24:f5:8b:f1:a4:ea:85:8b:71:
d6:df:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:37 2025 by rpki-client