Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: uQfotJnmLFzU93jR64NtHIwScRlur+f+N9Tg1Pbify8=
Subject key identifier: D4:CB:5F:53:20:42:D6:2F:B2:C0:68:A8:D9:6D:7D:84:70:D3:24:A1
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01975647E946E8E8E1A8573C44FAF798B38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 20:00:42 +0000
Manifest this update: Mon 09 Jun 2025 20:00:42 +0000
Manifest next update: Tue 10 Jun 2025 20:00:42 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: zah9oY3yILyNLoN9Ggj5uLomQc57mQq1yhVy4y7ZcZg=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:47:e9:46:e8:e8:e1:a8:57:3c:44:fa:f7:98:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jun 9 20:00:42 2025 GMT
Not After : Jun 10 20:00:42 2025 GMT
Subject: CN=d4cb5f532042d62fb2c068a8d96d7d8470d324a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:aa:da:0d:20:23:92:c6:68:12:87:0b:58:
7f:44:7f:ad:01:2a:7f:c7:de:01:d2:cf:d1:9e:99:
8c:a9:46:dc:b9:60:28:d1:49:bd:25:a9:be:eb:a6:
52:ca:3d:b8:94:79:04:d9:73:d9:da:cf:a5:ff:54:
cc:9e:b7:2f:b5:e2:20:e5:a3:3a:fa:2d:48:da:76:
60:18:72:e3:15:fe:73:fb:08:40:39:2f:0b:a3:3d:
55:d3:74:67:ce:ed:e1:59:2f:1f:8f:5a:fd:a3:35:
68:bc:65:fc:76:2e:0e:0f:91:c3:fb:cc:87:47:cd:
92:73:31:12:83:8a:15:27:b6:77:da:a9:e3:fd:c1:
9e:24:4c:4f:5d:9e:a7:a9:ae:83:04:0b:41:27:34:
ba:c2:6d:ed:a7:ed:83:ed:7e:12:43:7d:f0:1a:74:
9f:67:c9:28:b0:4f:cb:b8:53:05:4e:28:9f:b5:11:
bb:39:e3:8b:0f:36:c2:64:69:0b:bf:7d:39:25:93:
a6:ea:e3:70:c7:5c:cb:fe:d9:23:0c:d3:a1:fd:71:
52:ad:e2:0f:b7:6a:d8:22:8f:de:ac:70:32:70:8c:
37:47:5a:0c:e7:b6:dd:e0:ed:a6:67:a5:e7:0f:a3:
e9:e5:34:cb:11:30:08:9a:37:5d:8f:f2:1b:61:71:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:5F:53:20:42:D6:2F:B2:C0:68:A8:D9:6D:7D:84:70:D3:24:A1
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:4f:30:8b:5c:6b:0b:bd:6f:af:62:73:fc:b1:0d:fd:2b:
f0:67:bf:49:63:d1:36:15:d1:58:a1:81:37:80:cc:33:be:d2:
91:03:06:7a:bf:44:5b:c0:4f:ea:cf:df:56:16:50:b1:cd:36:
fc:74:5e:99:95:d3:b5:c9:18:23:31:ef:0b:ea:96:84:79:21:
16:5c:6c:2f:6b:32:b5:08:5f:2b:00:b1:96:41:9e:b5:fb:cd:
40:6e:56:cb:70:f3:93:f4:f3:66:d4:e5:8c:e4:7a:70:0b:5c:
5f:68:7a:e8:6b:a7:78:e4:b4:19:ca:90:40:c7:d4:6f:64:b5:
57:84:24:5a:d2:06:a8:51:bf:65:02:7f:7f:98:f7:0d:13:91:
68:1d:82:c1:19:5a:dd:22:42:54:74:f8:2d:96:d6:b6:84:ea:
aa:5f:c0:8b:47:aa:35:c5:cb:e8:a2:81:44:c2:95:1f:4f:05:
2f:57:a9:ba:7c:db:7a:94:cb:a9:8e:39:6c:dd:0d:53:a7:a3:
e1:53:14:7f:53:c8:12:9d:c2:c5:b8:80:0c:9e:84:88:6c:d8:
5e:a4:23:a7:2d:09:5d:e2:56:9f:4f:5c:be:5b:fa:50:c1:74:
42:eb:93:03:bf:79:f6:20:f4:78:f6:ef:e8:b7:0b:b1:44:cf:
8d:08:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:07:15 2025 by rpki-client