Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: 5UOpy4/ONcmoPwENoN9ZB1VaGeIdT7HC5+iv1K01r1w=
Subject key identifier: 9D:2F:AD:EF:CE:8F:C6:2F:92:7B:2D:C0:16:16:9A:20:41:2C:74:01
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01975E016B9CA842CCA9F559F68B3DE684C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 08:00:40 +0000
Manifest this update: Wed 11 Jun 2025 08:00:40 +0000
Manifest next update: Thu 12 Jun 2025 08:00:40 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: oL/wMfExryF0iBIhmtQHopK4tE6Fu24CyfY7PAN3rPg=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:6b:9c:a8:42:cc:a9:f5:59:f6:8b:3d:e6:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jun 11 08:00:40 2025 GMT
Not After : Jun 12 08:00:40 2025 GMT
Subject: CN=9d2fadefce8fc62f927b2dc016169a20412c7401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:fb:d0:84:92:1e:a7:08:b8:a0:5e:4d:b7:
be:8f:2f:2c:ba:64:b7:b5:35:41:7c:ba:bd:a3:e5:
20:b4:b6:b8:9d:aa:c7:6a:30:02:59:77:e7:58:86:
91:e4:2f:f3:0e:93:72:50:14:38:6e:94:92:a6:e0:
7a:d5:e5:45:0c:31:94:51:19:c9:86:cf:6b:66:6a:
20:be:1f:49:c0:a7:ed:71:bf:c3:47:22:9a:26:29:
a1:17:0e:18:13:17:c5:96:4f:e7:bb:39:3c:be:c8:
f3:dd:97:84:d1:f0:0b:23:e1:36:93:9b:ee:c6:1f:
0f:f3:6b:1a:68:71:e9:a9:6b:63:fe:6a:a1:9f:fc:
aa:9d:d7:de:6b:3d:8d:e4:ed:f5:48:2b:34:08:fd:
6b:b5:d0:29:86:e5:20:dc:e9:0d:ce:10:bc:d7:80:
a7:d4:23:45:9f:13:6a:46:43:2c:00:fb:76:64:47:
d3:e9:51:09:83:bd:f0:87:46:a7:47:7b:2f:dc:26:
30:cc:9e:75:5b:ad:5f:ae:21:e1:f8:c1:0b:77:02:
b1:7f:36:84:8f:ec:49:75:20:f6:13:84:4d:93:7c:
58:58:f9:42:bf:ce:c1:36:6e:f7:26:43:b2:d7:fd:
b3:3c:1d:1b:91:63:00:4f:92:a9:24:5e:fe:9a:1e:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2F:AD:EF:CE:8F:C6:2F:92:7B:2D:C0:16:16:9A:20:41:2C:74:01
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8b:53:31:8a:f2:4b:2b:30:2b:60:59:75:c4:ef:a7:50:db:
fc:3a:d8:a5:50:60:cf:b9:aa:28:3a:4f:65:fd:f0:bf:41:52:
c7:2e:42:6a:fd:7d:37:6d:a0:69:5a:eb:b8:de:19:10:20:d1:
f5:30:5e:1d:05:63:18:37:c3:cb:bb:ca:23:d2:48:bb:f8:7f:
79:96:ef:c4:59:f9:1e:3a:a8:96:48:5a:ab:1a:ef:c1:53:33:
11:36:2e:f5:7b:32:97:b3:59:e3:c1:57:7b:55:35:d7:62:e2:
c3:5b:8f:86:56:30:8a:be:bf:56:b3:89:28:e5:48:57:73:f1:
a4:83:00:c8:03:3a:f6:1f:4c:09:8c:4f:c5:a6:fb:f0:66:86:
4f:14:b2:b4:b8:72:76:c2:eb:06:74:30:17:bc:c0:86:69:b1:
96:6f:b2:d9:5c:a3:04:7e:b8:ce:5b:95:bb:69:6b:14:83:41:
a9:0c:35:24:78:83:33:0a:05:52:db:ac:7f:e8:4b:70:de:ff:
d5:dd:ba:df:c0:ec:44:f1:21:98:98:cc:5c:99:58:57:de:25:
50:95:f4:9d:05:04:03:cc:9c:7c:03:b5:84:55:99:9d:98:33:
67:17:56:d7:c8:31:df:91:16:56:f2:29:1a:4b:e5:92:c9:20:
38:e2:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:52:11 2025 by rpki-client