Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: sC8JjeHwFgRNe4SPSw7pGnEK9fuFxflHIXYnaz3iGS8=
Subject key identifier: 61:D1:08:3A:45:40:82:BD:DF:06:E6:26:89:EE:AA:0D:F9:30:34:34
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 01975CB847AB5F489E48D4229C09E06B1892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1012
Signing time: Wed 11 Jun 2025 02:01:10 +0000
Manifest this update: Wed 11 Jun 2025 02:01:10 +0000
Manifest next update: Thu 12 Jun 2025 02:01:10 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: /xQTraJSTxINQOlLR/qOWAHm39GWv0JLThuRvVvuLCk=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:47:ab:5f:48:9e:48:d4:22:9c:09:e0:6b:18:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jun 11 02:01:10 2025 GMT
Not After : Jun 12 02:01:10 2025 GMT
Subject: CN=61d1083a454082bddf06e62689eeaa0df9303434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:19:55:77:76:0d:48:eb:8f:db:9c:a3:77:
3b:65:5c:6d:fa:77:60:8c:23:8d:47:5b:1f:dd:c9:
6b:74:aa:4f:c3:a4:5f:f3:c4:12:9d:fb:d6:27:b7:
85:1f:35:22:45:19:3e:ac:4f:e0:22:97:90:62:66:
b4:38:16:6f:7d:9c:84:e9:5a:d5:44:15:2e:d1:e0:
e8:db:3f:5f:3e:cd:f9:f9:cb:a8:df:b6:9c:2c:cb:
fb:2e:13:aa:23:3b:17:63:fb:6f:20:43:53:68:27:
01:aa:11:96:26:b0:19:89:2c:1b:29:4c:8c:4b:b7:
ca:b0:97:ad:84:0c:cf:c7:4b:9e:f8:23:d1:32:06:
7e:88:2e:ff:d9:f6:e2:44:10:e1:14:36:12:11:64:
81:88:39:76:35:86:3c:15:c0:26:ef:3d:44:9a:3e:
52:d7:65:eb:ec:1a:54:72:af:3a:91:dd:c4:05:4b:
cb:32:e1:20:54:0f:f8:df:f7:ed:d5:e4:82:88:b0:
78:1b:99:46:7a:bf:f4:7a:5e:60:00:4d:d0:ad:34:
81:75:2b:13:52:42:30:b7:44:d2:46:b5:1d:b2:34:
2f:ba:02:16:ea:dc:f6:5e:52:9a:64:0d:a4:1f:f5:
25:18:c3:22:3a:4a:1f:64:6b:f7:4f:27:d2:43:f4:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D1:08:3A:45:40:82:BD:DF:06:E6:26:89:EE:AA:0D:F9:30:34:34
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b9:75:e2:82:3a:82:e3:52:b7:a8:06:53:15:9a:72:7f:19:
67:bc:97:89:28:e1:0f:30:1e:3c:43:a5:cb:0a:45:cc:84:ad:
a4:5d:32:0d:a0:00:33:bb:04:c2:f5:38:51:07:a2:ed:fc:10:
5f:86:a8:3f:31:4d:f6:11:ac:0d:2a:b3:bc:19:ce:4e:9d:e7:
2c:c0:4a:2f:f4:41:00:7f:79:f6:a3:fd:8e:0a:e6:3e:a9:97:
17:17:2b:f9:43:99:fd:a5:43:ac:4b:8b:53:25:29:c4:08:6e:
5a:b7:71:7a:5b:2a:82:d8:3d:1f:1f:d7:44:d8:94:72:f3:30:
32:39:54:19:dd:14:b3:8b:a4:c3:73:3f:e5:7c:46:47:b7:22:
18:ec:fe:06:09:a0:5d:de:80:74:a2:00:2e:b6:fc:f1:47:bb:
a8:fb:b7:ac:fd:16:4e:58:7f:ed:7a:3b:74:91:f9:36:d9:43:
c5:29:12:04:be:17:35:14:40:c1:fe:b9:7a:c9:15:c4:7e:22:
0b:e0:03:5b:39:cc:19:79:29:23:ae:16:2e:51:d1:15:44:d0:
37:d7:34:da:7f:47:5f:7c:2e:03:fb:51:d2:eb:2f:24:27:ff:
b2:44:86:68:aa:e7:d1:54:8a:07:65:c5:54:20:70:cb:1a:8e:
14:45:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:44 2025 by rpki-client