Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: sL0Uv/XbC6H9hCAumKtqKBNAB5R/Z7GUtzumikG4EB0=
Subject key identifier: 6C:F2:08:72:95:45:E0:82:6C:12:98:76:47:11:FF:8D:3A:59:60:F7
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 01974FA0BAC0713E0A4E56A5FA422033F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 1227
Signing time: Sun 08 Jun 2025 13:00:23 +0000
Manifest this update: Sun 08 Jun 2025 13:00:23 +0000
Manifest next update: Mon 09 Jun 2025 13:00:23 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: u4F/K8kupq5zKw2WxXspR9XujvBd/sXoda3hqnHUzaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:ba:c0:71:3e:0a:4e:56:a5:fa:42:20:33:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Jun 8 13:00:23 2025 GMT
Not After : Jun 9 13:00:23 2025 GMT
Subject: CN=6cf208729545e0826c1298764711ff8d3a5960f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:45:3a:3d:2f:72:ef:9b:47:d0:36:bd:1d:
56:9e:c8:7e:61:43:4b:47:c1:ae:e9:75:42:f2:5c:
af:68:26:9c:6e:2b:98:f8:33:d9:85:fd:50:86:26:
99:82:f7:9a:18:ff:ac:7c:4a:21:78:5f:d0:1c:9a:
78:8d:2f:86:3e:ac:71:a4:28:16:78:13:b6:c3:c2:
e8:ee:76:b3:28:74:ce:2f:a3:fc:14:ef:cb:c1:91:
36:51:cc:8f:86:ef:62:4c:8c:9f:36:22:a8:5e:cd:
39:01:23:18:85:32:0c:41:be:5e:3f:63:74:16:41:
7d:ff:7f:73:3e:62:f1:d2:8d:f9:55:5f:aa:d0:4c:
86:0b:07:cd:bc:ca:82:5b:dd:f5:12:01:96:52:ed:
44:4b:69:a7:87:3b:98:51:d8:ec:a6:7d:d6:3a:60:
90:87:8b:d6:bd:b8:b4:62:98:8a:5b:eb:a5:2a:34:
cb:86:8e:38:7c:db:e3:6a:6c:4a:f6:1b:f2:42:3d:
54:7d:15:bf:f1:3f:37:2c:9e:cc:7a:f8:aa:39:c4:
3d:65:1a:b7:51:49:ab:98:96:2e:d7:a2:90:92:aa:
bd:d1:70:ce:ed:20:b1:49:86:55:50:78:a5:3a:2e:
1d:6a:2f:fe:63:5f:10:74:4e:af:4a:33:66:45:34:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:08:72:95:45:E0:82:6C:12:98:76:47:11:FF:8D:3A:59:60:F7
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:67:93:92:82:aa:ca:8b:2b:c7:b0:9c:ce:cb:a5:ce:2a:
e1:55:70:fe:de:a8:2e:8b:d0:8f:8c:bb:22:4d:2c:ed:a0:b6:
0e:96:23:8b:d0:45:10:90:60:8c:f0:3b:e8:9b:27:fd:13:e8:
40:ed:1c:e7:ca:ee:6e:af:fb:d3:a7:c2:fb:59:d7:ae:28:42:
1d:e7:a1:10:3e:8e:66:b3:6a:9b:92:60:94:2c:10:e2:a9:a1:
88:1d:48:e6:df:71:0e:2e:66:95:58:72:98:c5:90:8b:b0:f4:
ad:e9:f0:a5:58:49:69:e3:8f:74:19:b6:2b:2e:ab:67:f1:34:
9d:c3:b8:7e:b8:a4:59:0d:5d:7a:b4:6b:e6:37:5a:f8:72:e1:
78:47:eb:21:f4:ef:88:0c:78:16:a0:5e:0a:46:29:e4:04:1d:
28:4a:15:a9:fd:3c:ca:92:fd:e0:20:86:c8:12:5d:3e:0b:72:
ce:40:df:1e:e1:80:00:0f:45:3b:6f:6a:4e:67:55:60:cb:9c:
7b:5e:e4:8d:55:01:06:eb:55:72:b2:27:6e:cd:c5:b5:7e:4d:
f2:c5:17:33:5c:9b:a4:e1:68:0d:b0:da:8c:de:95:5d:52:e2:
fe:99:51:a9:d2:1e:3e:f0:1c:9e:4d:e4:92:9a:ad:82:9a:f8:
f9:e3:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:52:53 2025 by rpki-client