Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: mRImfC414t1/nKisg2GKSQSJL+4sZD7S1i13hH0Yk1g=
Subject key identifier: 43:84:6E:EB:40:DE:21:B4:B5:A9:D0:36:2C:DC:E0:8A:AE:07:92:FB
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 0197526B87887D85E9672C1617879AD627D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 01D1
Signing time: Mon 09 Jun 2025 02:01:07 +0000
Manifest this update: Mon 09 Jun 2025 02:01:07 +0000
Manifest next update: Tue 10 Jun 2025 02:01:07 +0000
Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: n4LXEC/Ny/3SaYnyyrWDU7x5ev5Dy6Zn9+b3wz0QEHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:87:88:7d:85:e9:67:2c:16:17:87:9a:d6:27:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Jun 9 02:01:07 2025 GMT
Not After : Jun 10 02:01:07 2025 GMT
Subject: CN=43846eeb40de21b4b5a9d0362cdce08aae0792fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:2f:8d:1a:20:99:8b:62:c4:2e:cb:49:49:
bf:9b:dc:e5:d9:28:7a:7e:e6:35:cf:6c:da:c8:9a:
ce:c2:a5:a6:31:a9:53:de:da:d1:82:69:38:3b:26:
23:c6:42:cf:2a:e1:79:44:ca:8a:07:45:d1:f3:1d:
ec:ee:21:5a:72:62:a4:1e:df:44:5d:43:36:ce:a7:
2d:bf:0d:9f:f7:b0:55:b9:5b:86:ee:55:57:a2:26:
9d:52:d9:e8:b0:00:bf:47:cb:b6:09:f5:31:19:c9:
cd:6f:24:55:e7:87:dc:f2:8b:d5:0a:7d:f9:f5:69:
bd:ab:04:82:b5:0f:4f:09:29:cd:28:1d:56:db:22:
18:76:2c:8f:af:8d:6d:00:04:4b:7a:5b:49:29:05:
5f:fc:6c:be:85:5b:07:cc:cc:48:82:d9:c2:90:78:
bc:5a:03:56:e7:65:cf:2b:d9:2c:03:ff:11:06:61:
f0:24:4c:45:bd:23:10:87:76:f3:91:d0:bb:d7:7d:
ba:21:d4:56:45:8d:96:98:27:6c:14:80:21:a6:8b:
02:6a:02:75:41:86:ce:9e:58:11:a5:b8:a4:2d:8e:
2f:ff:6b:2c:45:83:34:da:7f:2a:26:b9:56:81:00:
09:88:a6:38:f3:cf:e8:db:32:f1:27:3d:9f:25:64:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:6E:EB:40:DE:21:B4:B5:A9:D0:36:2C:DC:E0:8A:AE:07:92:FB
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:82:e4:99:86:3f:9d:c4:ee:6c:ad:5c:76:3c:07:23:79:ca:
c2:8f:e0:b2:48:2a:fd:dc:3b:c1:dc:56:56:04:b6:47:29:28:
1f:01:6c:11:be:24:53:4f:f0:2e:23:fc:b0:16:32:21:0c:7e:
ca:d7:89:be:b2:7e:23:f9:34:01:09:f2:30:4c:06:6e:1a:a8:
3a:12:24:64:88:41:12:1a:b3:fe:2b:4d:57:ca:0a:b6:16:7a:
1d:c8:b6:2f:55:95:49:1f:8f:05:5c:69:e6:29:cf:8f:07:9c:
fa:73:86:de:ca:39:1d:c2:48:d1:da:48:17:9a:6e:e0:ef:cf:
78:bd:49:37:c5:ab:5d:14:e0:1a:7e:85:36:31:ff:b6:35:e7:
ff:8f:21:e0:ca:af:43:a4:3c:ce:52:c7:3c:b3:ca:87:85:1f:
b6:a1:a0:c8:3b:89:88:62:ed:2e:12:ff:74:42:86:27:4b:49:
98:a7:d0:42:9c:99:f7:18:6f:77:84:85:b6:8c:88:12:ce:2f:
2f:7f:8b:4f:29:f9:d2:a2:94:62:37:89:ed:a8:1d:ab:24:5c:
76:b2:b0:29:bb:31:a2:58:dd:61:c5:14:ca:d7:52:fe:00:b0:
5c:a3:30:bc:17:cd:5b:6d:f4:2e:21:f6:90:12:1d:bf:c9:d8:
10:13:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:20 2025 by rpki-client