Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: 6Xzn8bTENA26kVL4rq9OW42Obycr+CTUJKLwuyetTUI=
Subject key identifier: 45:F6:CD:51:50:E3:E9:CB:77:E4:25:D0:62:E9:77:D2:66:AD:70:53
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01974F338C80810814D16DF4F9CCF520E684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 09E5
Signing time: Sun 08 Jun 2025 11:01:07 +0000
Manifest this update: Sun 08 Jun 2025 11:01:07 +0000
Manifest next update: Mon 09 Jun 2025 11:01:07 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: ywBnmIkukTHyCiizyHJrQWuvuEeZERi8OsJsHHHIXL0=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:8c:80:81:08:14:d1:6d:f4:f9:cc:f5:20:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Jun 8 11:01:07 2025 GMT
Not After : Jun 9 11:01:07 2025 GMT
Subject: CN=45f6cd5150e3e9cb77e425d062e977d266ad7053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:df:2c:a0:f8:94:47:ba:da:cd:e1:bc:29:
9a:4b:b7:81:f2:b6:78:a3:9f:94:f2:59:c1:75:8d:
ee:5e:31:82:76:bc:75:ca:ab:73:23:93:fb:0a:ae:
54:65:f2:de:4b:7e:7a:b3:e7:8f:18:16:1f:cc:0c:
8c:34:e4:c2:34:e5:6d:7b:34:ef:86:66:a4:46:ac:
47:11:c9:04:1a:76:b2:c5:73:53:3f:a3:5c:d3:f9:
e8:02:56:e6:36:d0:b1:31:2e:a2:2e:35:d8:cd:7f:
64:bb:b4:7f:60:fd:03:bf:c8:73:21:88:74:14:e3:
9a:7d:dd:a0:f2:15:4a:92:c3:2c:9a:07:2c:5b:72:
d0:40:69:f7:b4:6c:3e:90:39:7b:89:e8:4a:54:d8:
c9:3d:f5:b6:51:71:d8:a1:69:d2:30:29:82:74:eb:
25:58:de:ca:1b:be:dc:1a:69:52:3c:56:62:78:74:
54:da:92:61:71:1b:36:6c:f6:a4:92:99:a0:75:56:
d2:43:a8:70:dd:dc:1d:b9:e7:69:a3:de:98:70:aa:
40:f0:e8:13:db:ba:16:48:35:a0:de:4f:bc:58:c3:
0e:70:19:6c:ba:96:26:fa:7c:2f:43:69:78:83:75:
07:c9:dc:3f:f9:81:75:12:ce:9a:bc:a1:d2:7b:d8:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:CD:51:50:E3:E9:CB:77:E4:25:D0:62:E9:77:D2:66:AD:70:53
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ea:5c:bb:d1:ba:0b:f6:01:c2:ec:fb:1a:43:1c:27:b5:d9:
16:d2:56:69:8b:e7:07:cc:14:c5:53:4c:0c:fd:73:fd:da:fd:
a5:0e:7e:27:83:72:cc:0f:96:6c:f9:0c:71:ac:5f:2d:d5:b0:
ac:7d:a1:a9:fe:dd:0a:78:34:35:aa:d5:92:90:1d:41:57:33:
18:34:dd:47:f3:e2:ae:cf:ed:7d:b7:3b:07:5f:f0:32:bc:b8:
f9:21:4f:47:3c:0f:0b:d3:52:5c:2d:2e:ca:2a:a1:0b:02:40:
a7:a9:96:9e:6f:31:ba:f1:aa:7e:1f:a3:5b:ed:10:12:36:91:
de:dd:62:48:db:ea:27:40:d1:7f:57:4a:03:c9:1a:ee:27:2c:
56:20:0b:8a:2b:4c:6a:c9:59:0c:ad:69:86:bd:6d:89:ad:d5:
5c:5f:27:42:6f:33:9c:1a:e1:e9:46:ca:a2:b3:c4:c2:79:59:
66:e9:6c:57:c5:93:ce:5a:5f:f9:3c:b0:04:d3:77:04:cf:9c:
86:6c:23:bb:99:cb:6c:fa:04:e5:eb:29:de:81:32:07:7b:02:
f0:fe:fc:67:a3:9c:77:c8:3d:9d:75:00:44:bb:c7:50:82:43:
8f:10:22:ce:9a:5f:d5:bf:0d:55:b3:4e:38:57:08:bf:7d:78:
b5:14:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:38:49 2025 by rpki-client