Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: vAr8dLyIp4oT6kJ04vkReYqG+C9+uEbtTsU5jLM6Kmo=
Subject key identifier: 9D:31:38:C2:22:3E:DE:1C:84:AD:C7:47:E7:26:81:1C:02:96:44:D3
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019748FA9E2EAEF1519B726A76DB17602B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 04CD
Signing time: Sat 07 Jun 2025 06:01:13 +0000
Manifest this update: Sat 07 Jun 2025 06:01:13 +0000
Manifest next update: Sun 08 Jun 2025 06:01:13 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: 3aMBrob3XI8RJvQNCesaVsKwa0epazaBc4e1i3HrNes=)
2: fjo3TJF5UJdtWXbH-RXUzzkMGLw.roa (hash: 3e8hosZ9ppBndt6p8XyvpqJUy9gK6SPz4ut0nyjSkJ4=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:9e:2e:ae:f1:51:9b:72:6a:76:db:17:60:2b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jun 7 06:01:13 2025 GMT
Not After : Jun 8 06:01:13 2025 GMT
Subject: CN=9d3138c2223ede1c84adc747e726811c029644d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:15:4c:87:55:fc:bb:1b:90:18:86:be:61:
0e:87:76:d4:9d:7d:57:06:cb:17:3a:88:5c:ea:b9:
3a:7f:c3:8b:a8:b0:05:ea:4b:54:76:ab:14:1a:b0:
46:70:f3:f8:1e:68:51:8f:62:29:8b:2a:48:4a:68:
7e:17:5b:52:9c:0c:ab:12:fb:6a:d4:de:38:2d:43:
03:f3:fa:14:e5:19:f0:a8:d2:2a:c9:43:eb:78:26:
9d:da:36:0e:45:5f:50:10:c2:92:9e:ce:57:95:9f:
1e:30:e1:9a:ac:0b:d9:4f:08:83:9e:82:93:42:88:
79:74:fb:34:68:1c:46:57:a3:a7:0a:e7:a4:d2:9c:
bd:3b:71:31:8e:e4:4f:60:eb:3f:42:f2:ce:d3:1c:
78:1f:00:2b:1e:ce:e4:d5:e6:ee:cc:5e:97:86:31:
be:4f:07:6a:22:e0:a8:b6:be:77:da:ae:ca:ec:72:
46:06:29:ba:7f:bd:bd:ad:9c:fb:56:07:5d:ca:3e:
d9:37:05:0a:85:d2:67:af:34:44:c4:eb:15:12:a7:
29:a0:76:fb:ec:ca:a9:0d:d3:62:60:c6:f5:55:0d:
9c:47:ad:b2:79:ed:9f:26:5a:0e:02:77:f9:15:bf:
fa:4e:a1:bb:1c:77:93:0a:01:33:c2:f4:2a:d2:09:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:38:C2:22:3E:DE:1C:84:AD:C7:47:E7:26:81:1C:02:96:44:D3
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ce:99:68:ce:45:46:e0:a7:cc:74:48:3a:2d:71:78:13:a0:
ee:9f:1b:62:3f:24:9f:db:a3:f2:82:44:6d:d9:83:59:33:d5:
9b:10:10:86:02:d6:7d:37:f5:33:82:b4:08:8a:71:01:09:b1:
9b:aa:b8:5d:cf:c7:c3:1c:d0:f6:d7:da:29:14:67:c9:44:68:
0a:7a:cb:26:08:08:62:e4:7e:49:76:6f:a3:8b:85:3f:52:2d:
35:98:31:67:32:0a:ba:a9:02:c7:5e:40:06:53:59:bb:97:c5:
b2:0e:d2:e1:a5:50:4f:4c:33:df:61:d3:31:32:04:53:ec:d7:
02:7f:58:49:5c:9f:df:98:19:c4:9a:ae:7d:7a:8d:72:f7:e3:
7d:18:be:56:9a:96:3b:3a:c5:7f:9e:cd:51:de:40:f7:f8:e2:
7d:db:e2:73:52:55:b8:d6:92:2d:16:ff:12:1a:7a:9e:f0:2e:
6e:02:51:b7:ba:ea:5b:16:33:60:0f:82:69:39:d3:67:f3:30:
9a:45:d8:09:18:1c:d8:df:a3:ea:67:23:0b:53:fb:10:1d:3c:
63:eb:f7:d2:3f:12:bf:b7:16:07:f1:95:28:01:1d:ec:2c:46:
2a:f0:b6:9b:1f:a4:ba:eb:2c:84:75:a6:f4:15:73:48:0e:32:
c8:18:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:15 2025 by rpki-client