Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: PYKx8JgZX1nnIdWZwnWplnYe/y/fo6tewzzLvoxeFlM=
Subject key identifier: 95:7A:3B:2C:62:4B:68:87:E6:EC:85:7B:66:F3:CC:D6:E2:92:17:88
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019749D5F37A2E2F71E39C5A11EF2A19CC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0CEC
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: D1hUo3vliuaDrsWiwQZ8I1I6YPEm4nzrhtY6wp53HqQ=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f3:7a:2e:2f:71:e3:9c:5a:11:ef:2a:19:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=957a3b2c624b6887e6ec857b66f3ccd6e2921788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:84:60:b0:2e:ea:a1:73:a3:0a:15:57:6c:
2b:77:5b:3a:2c:72:58:01:b8:22:3e:73:cf:c4:d3:
ed:a3:51:2d:39:4e:3d:c4:21:88:33:f9:e6:67:94:
76:73:f8:a3:d1:0c:36:29:9d:5c:62:c8:78:66:31:
93:4d:00:e8:6a:46:8c:0b:64:b2:2b:9d:f9:ee:e9:
d1:70:47:63:99:a6:c4:62:73:11:da:e6:51:e3:1b:
6c:8c:2a:87:64:0b:0d:ac:c0:11:a5:7d:d4:a7:b7:
6e:27:6c:a4:08:b7:61:d8:ce:4d:79:05:81:67:f4:
63:a1:05:5f:1d:6d:f5:49:ab:e0:62:35:1e:1d:14:
64:47:a5:0b:c4:ca:e3:f7:84:72:d4:e0:f3:bd:e8:
84:42:46:c3:59:b0:42:08:99:d2:6f:e6:54:d1:75:
9f:98:bb:c5:2f:5e:92:51:07:98:99:2e:23:f5:71:
a9:2a:b3:12:35:75:8f:eb:a4:d5:b0:53:ae:2c:e4:
73:53:fa:6b:8b:7f:28:63:7d:9c:29:b6:d1:38:3a:
65:3f:05:d8:c4:8e:21:61:cc:bc:b8:f0:0a:88:5c:
2b:1f:6b:2f:97:5c:48:dd:43:e2:76:05:94:7a:a1:
3a:3d:0c:09:ca:ad:01:1d:07:74:40:4c:19:e2:7e:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:3B:2C:62:4B:68:87:E6:EC:85:7B:66:F3:CC:D6:E2:92:17:88
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:ad:21:66:c2:df:01:ee:a6:0b:dc:ea:6a:60:e4:51:5f:
a7:21:96:83:93:f5:7b:08:c9:9c:6a:5a:c4:87:b9:ba:04:1d:
4c:34:6a:1d:9c:cc:fe:1a:af:0c:bf:8a:98:61:f9:89:40:fc:
74:f7:0d:25:0d:41:1a:5f:60:52:69:b4:9f:fe:a0:f9:1b:80:
7d:b4:3d:85:fa:e4:5b:50:1e:55:12:39:3a:0a:15:ba:7c:4d:
7d:d1:41:bb:6a:6d:69:55:01:4a:3f:ea:00:01:dc:97:10:4a:
78:46:0b:f5:c0:a1:5c:5b:3a:52:3e:16:06:20:b3:63:c2:1c:
45:a3:77:d8:6f:83:ab:35:90:c3:fb:c8:fd:8e:1e:50:49:c2:
a6:95:bc:59:ad:f6:88:15:c2:b6:08:dd:b1:61:04:71:09:d2:
98:2f:19:12:01:33:fa:0b:65:25:5d:fb:1e:6c:36:36:a9:8f:
d0:8e:f2:34:94:fd:49:0f:21:7d:01:c4:78:2f:bf:64:41:ba:
1c:5a:40:80:f1:8e:c0:60:f9:cd:6c:ba:c0:42:f8:0c:6e:39:
d2:86:c5:7a:1f:aa:88:58:b6:f2:42:aa:f2:1c:06:55:cb:36:
fb:92:52:0f:28:a2:f8:ff:fb:3d:de:ce:6b:be:17:ee:95:f2:
fd:ba:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:47 2025 by rpki-client