Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: utAYNSFoVCc8tsius5YQo3PNqUBeHOIdqUUHFhvcVfw=
Subject key identifier: 8C:ED:73:B5:67:86:0D:DD:2E:90:23:B9:05:E3:CE:D4:43:D4:6E:2F
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 019765F2642AA6AD38AA1D70C76231C1C845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 124C
Signing time: Thu 12 Jun 2025 21:01:13 +0000
Manifest this update: Thu 12 Jun 2025 21:01:13 +0000
Manifest next update: Fri 13 Jun 2025 21:01:13 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: yohBHc9pcP2L6SGfmjihng/TYq+1/0PYtqW9MwdpqJg=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f2:64:2a:a6:ad:38:aa:1d:70:c7:62:31:c1:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jun 12 21:01:13 2025 GMT
Not After : Jun 13 21:01:13 2025 GMT
Subject: CN=8ced73b567860ddd2e9023b905e3ced443d46e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:e6:7b:76:2e:1b:91:b5:9f:3d:f1:61:91:
bc:ec:dd:37:bd:29:17:5f:2a:7c:42:10:fb:5e:8d:
63:83:21:1c:41:8c:98:e0:19:b8:36:00:1d:4d:bd:
6a:a6:50:bd:3a:91:5c:64:1f:2a:2b:c7:a6:7b:92:
13:04:27:7b:e1:57:b6:75:55:34:8d:59:f0:e4:d7:
72:3b:64:97:d2:96:c2:e5:da:5b:dd:07:f1:93:f6:
64:5e:0f:4b:de:7e:af:4e:7e:c4:67:10:17:13:a6:
d2:62:a3:af:32:3d:5f:77:c3:c4:22:9f:90:a0:9f:
6a:ec:ad:af:5d:df:96:2c:a6:92:bd:a5:cf:fc:c9:
f3:8a:f1:84:81:41:ee:bb:0c:55:41:1d:8e:4e:ef:
d2:3f:99:07:bd:a8:12:a2:e5:15:b6:55:b7:3f:72:
b9:05:ed:be:e1:30:f4:cc:c5:c7:2a:17:29:15:15:
cf:ba:46:54:6b:f9:ad:8e:a9:6f:cd:6f:14:f4:6b:
00:13:e6:92:a9:97:bb:4b:25:e8:c7:d4:c1:b6:22:
3f:3d:9c:8d:3c:7a:2a:b1:03:5f:d2:8e:54:67:c3:
6c:c6:c1:04:a6:b3:e8:0b:cf:15:cc:b0:38:19:2f:
12:6a:30:7e:e4:fd:b0:48:25:90:71:6b:74:10:47:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:73:B5:67:86:0D:DD:2E:90:23:B9:05:E3:CE:D4:43:D4:6E:2F
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d7:84:75:bf:30:25:f4:70:69:26:81:99:4a:a4:4c:49:72:
75:72:1a:d5:e9:08:d2:7b:b2:a8:13:e1:a5:d6:cb:0d:c1:05:
fc:60:42:d6:19:81:46:cb:28:76:76:06:c2:3b:ca:33:63:8c:
c6:54:3a:67:a2:d9:da:c6:e3:98:f3:1a:83:f3:8c:e0:d7:0e:
21:87:82:cb:d2:c9:53:1a:55:2c:ee:16:16:60:5d:57:75:bf:
7c:4d:83:3d:f3:d5:69:84:59:74:cb:44:38:aa:04:9c:7d:b9:
16:79:eb:c9:71:85:73:10:65:e8:a8:f3:ec:f5:b2:b8:25:c1:
f3:fb:18:ea:6a:b3:87:a8:f2:d4:d6:35:39:34:7c:d5:b8:cb:
18:3d:d4:e3:2f:cc:83:64:9c:d0:16:29:cc:ac:22:e8:ba:7a:
41:c3:ee:ae:d3:bd:85:db:4a:61:05:88:85:b1:76:70:fd:08:
91:19:c9:95:1f:68:fb:50:a9:89:94:b3:09:f0:75:23:92:b6:
31:26:7e:e4:6d:61:18:5e:45:8a:ee:d4:1b:19:4e:e6:7f:1b:
58:3b:28:cb:ca:af:48:5b:d9:5c:db:13:50:53:f4:3f:bd:66:
5f:fc:32:bd:0c:3d:dd:7e:82:29:fa:4e:e5:6d:ac:60:8d:e5:
c2:3f:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:46:26 2025 by rpki-client