Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: Oaqm/paKgNDOPPmRHus/ASQS9HLbsx8BREW10Xd14OQ=
Subject key identifier: CF:9D:8E:EB:72:62:73:62:D0:71:13:AB:E6:96:AC:FE:BF:88:A2:4E
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 01974742806A9FA310FC420FC048FBFCDB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 12FC
Signing time: Fri 06 Jun 2025 22:00:29 +0000
Manifest this update: Fri 06 Jun 2025 22:00:29 +0000
Manifest next update: Sat 07 Jun 2025 22:00:29 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: CW+o2Z0OJ+9kwk65vjifdXFiWon5rIVGSVhk5uRkUqM=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:80:6a:9f:a3:10:fc:42:0f:c0:48:fb:fc:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Jun 6 22:00:29 2025 GMT
Not After : Jun 7 22:00:29 2025 GMT
Subject: CN=cf9d8eeb72627362d07113abe696acfebf88a24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:6f:fd:23:88:70:59:90:22:2d:5f:14:b7:
29:84:a1:f2:ad:fa:3a:ba:8c:39:54:cd:9c:90:48:
a2:19:72:16:67:58:14:60:9c:90:39:f1:ad:61:68:
69:0b:bd:e5:18:4a:ec:0c:a5:5b:93:cd:ab:3d:a2:
28:8c:b2:1e:1a:1a:9e:07:21:d0:11:47:95:c2:56:
93:52:31:52:96:d9:25:72:08:b2:ac:49:bb:77:d6:
77:71:a4:7b:07:bf:63:0a:26:0b:1b:de:8e:6b:39:
ac:cc:c9:fd:fb:c7:ab:7e:8a:a3:c7:0f:1d:e4:88:
d0:d6:45:98:19:c2:6e:db:3c:a2:cd:07:7b:bc:0f:
de:e2:43:55:19:7c:4f:39:59:16:b2:bf:6a:43:d9:
bf:81:4f:d6:b1:f4:de:57:af:13:6a:01:76:35:3b:
ac:d1:84:5f:3f:a8:ec:67:cf:b5:6f:88:72:0c:90:
77:aa:fb:16:4a:38:cb:9f:19:5e:ac:59:45:ca:8a:
e9:13:6d:82:6d:6e:a1:7a:7c:ac:1e:c3:06:87:4c:
b0:38:4c:ff:b4:e4:b1:a1:a8:a3:0f:57:d1:2c:e5:
bf:a1:16:d8:bf:df:bb:56:49:3f:59:99:1e:8e:91:
51:3f:3f:99:1c:12:81:df:4e:e1:de:47:b6:94:3a:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:8E:EB:72:62:73:62:D0:71:13:AB:E6:96:AC:FE:BF:88:A2:4E
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:45:3e:b5:4c:72:06:98:ed:3f:01:7a:34:3a:3e:cc:26:
b9:eb:68:86:23:27:38:43:aa:0a:5f:b9:65:23:40:82:df:99:
d5:f0:8f:a6:99:7d:1c:75:df:91:6a:18:c7:8c:a6:0a:5b:1e:
fc:43:d8:02:9f:4f:5a:6d:07:b9:3d:79:7b:f6:83:55:89:d6:
96:79:61:c6:75:89:55:c2:a2:c5:b8:0b:5e:04:d1:a5:4e:4e:
c9:81:b9:cd:6d:3b:4d:3f:f9:1a:f7:9e:fc:b8:5b:32:c8:0a:
48:15:9d:8b:64:74:fd:24:0b:65:77:58:e4:d1:3f:43:82:83:
19:43:2a:d1:52:26:30:ef:79:fb:71:2e:5e:f6:c8:ff:d6:f4:
4a:fa:16:29:92:17:ec:d5:4d:e6:34:56:b7:13:88:f1:9d:02:
cf:e2:ef:70:12:86:9e:86:ce:eb:8c:93:7f:05:ab:b3:42:21:
d4:a3:05:c8:37:68:67:a2:b4:3e:27:85:64:3c:f2:ef:bb:43:
5d:bd:17:9b:30:98:0c:6f:0f:a1:28:07:83:2f:f7:f4:2d:75:
50:fb:7e:4b:66:b5:77:87:e4:8a:18:a1:d3:da:6e:48:e1:84:
b3:e4:6b:68:1e:d3:6c:f3:ea:6b:fb:ce:5b:15:64:b8:9b:e4:
8b:d9:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:47:34 2025 by rpki-client