Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: Os659TspJZMiHQ0F6SBKOl7S5kTLfzJ44AXpY7qf8j4=
Subject key identifier: 10:B7:68:AF:5E:1A:54:57:C6:44:48:37:7A:61:98:3D:64:18:48:53
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019769CEA795F082D852718705D6D56A8AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0C6E
Signing time: Fri 13 Jun 2025 15:00:40 +0000
Manifest this update: Fri 13 Jun 2025 15:00:40 +0000
Manifest next update: Sat 14 Jun 2025 15:00:40 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: zaPNuT6WWD8vBg3ptTDgF4yEJpypB6zDhZb9L8+xmoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a7:95:f0:82:d8:52:71:87:05:d6:d5:6a:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jun 13 15:00:40 2025 GMT
Not After : Jun 14 15:00:40 2025 GMT
Subject: CN=10b768af5e1a5457c64448377a61983d64184853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:4e:31:2d:8b:6c:00:ca:c5:2a:e4:f2:ff:
3a:3a:7d:bd:31:fa:b2:1e:84:d3:a0:b6:44:d7:38:
d5:94:c3:be:c5:31:7c:61:de:31:5f:2f:31:22:9c:
ab:5d:f9:b8:5f:64:0c:66:94:34:8e:41:c5:10:7e:
70:e2:3d:c7:16:9e:fd:63:3a:14:3d:fc:bc:51:11:
1d:22:2f:72:a1:d9:bf:94:c9:f3:d1:8a:00:d8:e3:
3d:46:58:f2:e4:0e:a8:d1:5b:8b:e9:44:81:8f:33:
42:4f:b0:bd:c2:32:d9:45:52:cd:b5:e3:8c:78:91:
c4:7d:10:ba:c9:75:25:7b:29:2f:46:27:68:6f:0e:
4b:6b:e8:ff:ab:ee:05:88:03:52:70:64:55:fa:eb:
10:6a:70:f0:b2:0b:a0:55:4c:cb:b0:c5:0b:8e:93:
31:43:a4:e3:66:c1:3b:42:61:3d:57:79:7d:21:68:
1f:aa:d1:ac:44:53:a4:c0:3c:68:cf:09:14:06:f7:
bd:64:68:0e:b2:a1:d4:4c:d2:61:49:97:1b:23:9b:
c9:38:e8:76:bf:40:a7:04:25:3f:89:86:1b:cc:97:
e0:3e:b4:06:a6:be:9e:97:f9:e9:0c:1e:e6:de:ae:
84:9e:42:bb:b8:03:54:f4:7c:05:f0:01:a4:ef:4b:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:68:AF:5E:1A:54:57:C6:44:48:37:7A:61:98:3D:64:18:48:53
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:10:37:0f:7d:3f:0f:3b:ba:e3:c5:d8:a4:29:b2:fc:3c:5b:
70:04:77:c6:6a:f6:96:90:f4:ea:d0:21:6d:ae:49:5f:05:16:
9c:48:55:93:b7:a3:76:a5:3b:cc:cb:68:c0:9a:de:17:26:42:
c7:4e:77:87:7b:07:e8:d9:87:85:da:cd:68:24:ac:dc:16:62:
ef:94:63:f7:6e:fc:b9:72:8d:97:6d:6e:15:3f:dc:d8:47:7d:
eb:94:a7:7d:2d:a4:7c:c7:57:3e:fc:72:9e:4c:6c:4d:88:04:
2b:77:a9:5f:68:6d:95:0c:87:35:02:ff:4d:29:1a:2f:1b:da:
f0:1b:bf:b5:ab:39:bd:40:b6:11:ec:62:21:6b:bf:48:68:0f:
37:5c:e9:3a:27:e7:27:b2:36:23:e7:72:c6:a1:7f:3d:35:e5:
59:b5:61:83:bd:6f:b8:a1:e2:8d:54:89:61:30:ee:8f:0b:d7:
28:ac:bc:e0:28:60:53:d9:62:81:eb:a1:29:1d:83:19:16:72:
3e:2e:e8:3f:d1:aa:16:86:c7:e2:e8:fd:cb:6e:9c:38:97:22:
0c:d6:3d:25:38:34:76:30:dc:c6:10:1a:69:72:6b:8f:be:0c:
f4:04:90:13:64:5f:3a:c5:57:61:39:fc:49:4f:15:a4:3b:37:
a1:fc:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:39:41 2025 by rpki-client