Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: rzgA1VaAMMzCEPjVOz7dXgwBo12tXUsUJup0k7rmGVk=
Subject key identifier: F8:B5:7D:CD:EA:D2:10:63:AE:1A:8F:0D:3B:5E:95:01:AD:50:7C:A6
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019765BAFDACCBAA0F1A94B135468151DF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 158E
Signing time: Thu 12 Jun 2025 20:00:42 +0000
Manifest this update: Thu 12 Jun 2025 20:00:42 +0000
Manifest next update: Fri 13 Jun 2025 20:00:42 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: 7iAcfWcoiq10iVywQUoxwD05PiaNawuHBW31mJBr8bg=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:fd:ac:cb:aa:0f:1a:94:b1:35:46:81:51:df:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jun 12 20:00:42 2025 GMT
Not After : Jun 13 20:00:42 2025 GMT
Subject: CN=f8b57dcdead21063ae1a8f0d3b5e9501ad507ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:f3:cf:3b:79:6c:0a:1a:05:de:0a:61:7b:
e6:14:9b:7f:da:3f:c3:d7:88:8d:15:c9:6a:a5:e8:
60:2c:a8:20:6a:b3:25:90:e6:86:b3:94:23:75:35:
1e:3e:66:e5:d6:14:a0:9e:dc:5b:1e:ee:07:25:bb:
c9:59:a8:3c:8d:21:80:c3:98:51:0f:41:78:47:dd:
a8:1d:73:1c:3b:4b:d9:5d:1f:93:34:b5:9a:20:21:
fc:8f:31:39:ae:de:54:de:35:62:77:91:d2:e5:d8:
3e:7c:7b:25:62:c0:a7:df:fa:af:19:c7:f5:f8:81:
c7:77:ae:b5:cd:e2:29:36:ca:d8:5c:be:0d:21:87:
97:5c:64:21:6e:bf:9b:c6:bc:2a:22:b2:e3:0b:bd:
52:aa:7e:86:69:25:da:6f:04:0d:91:2d:06:09:1e:
70:02:78:70:3c:07:d8:ac:db:4e:67:08:62:02:6f:
9d:aa:df:40:e5:99:c5:8c:36:96:0f:27:1f:78:bd:
d5:59:61:d5:b3:74:00:c4:18:04:55:f5:26:c2:11:
07:ec:28:d4:ff:4a:89:fa:a0:fb:80:c3:92:39:77:
17:5e:9c:b7:6c:0e:b8:d4:4f:85:9f:dd:78:5f:f8:
b2:bd:cb:7e:0d:1b:34:a5:19:ce:ae:82:cb:53:50:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:7D:CD:EA:D2:10:63:AE:1A:8F:0D:3B:5E:95:01:AD:50:7C:A6
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2b:ee:db:4e:f1:c0:e3:14:54:07:a4:81:f2:17:d9:70:a3:
f1:5e:cb:96:b1:8c:ee:f4:d3:8a:ac:55:88:ce:a0:13:fe:6e:
84:73:dc:b7:3d:ff:db:55:34:65:87:83:49:52:a7:a4:1b:9b:
0f:8c:54:f6:e0:03:fe:c3:1e:7f:f0:1a:de:fd:00:66:09:3f:
ac:95:97:bb:3a:5b:0b:5f:25:10:f9:e1:3a:b8:bc:f5:38:a7:
30:c0:2b:05:ed:8f:9b:bb:09:a4:29:02:07:9a:99:47:4c:63:
07:ed:fe:0b:da:65:1b:bd:76:7f:6e:c4:35:a0:cd:59:ea:28:
bd:41:21:c1:20:1e:26:63:bf:fd:65:16:d3:ff:dc:1f:3c:79:
7e:81:9b:b1:46:4a:90:5b:9b:c4:cc:fa:54:01:44:6e:f6:f0:
dd:f7:db:24:4b:ad:d1:c8:3d:18:b0:0a:5b:f7:0d:3b:2b:ab:
54:eb:63:40:57:91:fa:d8:37:6b:eb:43:83:4c:50:66:1a:00:
34:b2:47:fd:11:de:47:83:25:a0:3f:d3:72:bd:9c:f1:7f:09:
4d:54:27:39:71:2a:28:a6:05:74:2e:40:d1:52:b3:8d:ab:0c:
e3:4e:74:b5:3e:a9:48:5d:d1:cb:cc:1f:63:31:9c:57:87:a1:
8e:04:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:59:30 2025 by rpki-client