
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: kRvYtswN3myg+7OS2JWLL2ikYVB5mBPkIcg3eHSvnuw=
Subject key identifier: 84:39:40:41:50:6E:A1:BD:55:FC:24:1A:92:C9:C6:02:11:F7:1C:29
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 019763CC884F3EF9BD2C51C91727B296ABAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 0C71
Signing time: Thu 12 Jun 2025 11:00:38 +0000
Manifest this update: Thu 12 Jun 2025 11:00:38 +0000
Manifest next update: Fri 13 Jun 2025 11:00:38 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: 3ony2rUBh6TZ0mzcl1a9Sm7zWSMwiC2n76wypcslWEI=)
2: _VrWIzeeb6E8sDSdAStFjFktgds.roa (hash: XW7KS/0ycwvajLuTV4nzdbjjjJAo77rPpbsld42wLs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:88:4f:3e:f9:bd:2c:51:c9:17:27:b2:96:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Jun 12 11:00:38 2025 GMT
Not After : Jun 13 11:00:38 2025 GMT
Subject: CN=84394041506ea1bd55fc241a92c9c60211f71c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:de:84:58:70:34:b8:c9:2e:38:31:e6:c6:7e:
8c:53:9f:f3:8d:0d:22:b0:31:76:79:4d:67:fd:98:
75:aa:01:f7:3f:9d:36:6a:2e:76:2e:be:f6:e3:a4:
c7:89:74:5c:c9:bc:c3:c0:59:49:d9:ad:40:d9:97:
84:05:83:31:3e:e8:59:d0:e9:f5:b0:9d:02:9b:ba:
ab:0e:cb:f0:aa:e5:df:9a:50:25:98:91:ff:3a:ab:
25:1b:09:cf:81:fb:d7:ea:26:8d:cb:ef:e1:fc:9b:
bf:da:25:0b:41:fe:8c:11:66:54:9c:f8:99:cd:de:
88:10:d6:e6:42:f3:ac:30:f9:e4:5a:b4:d6:b1:2a:
55:5a:3c:04:db:96:63:56:26:0c:bc:15:8f:d3:9e:
d9:1d:1e:2b:19:59:a8:9c:ee:35:3e:04:4f:52:79:
1b:15:0a:b5:d3:39:ef:9a:c9:c4:ad:ab:03:84:60:
fa:5d:bc:d8:40:18:0f:36:89:dc:16:34:18:c8:ee:
f5:a3:c3:77:4c:3d:0b:70:72:1f:4a:61:26:9c:d9:
c7:ae:12:e0:7a:7a:cc:98:8e:46:df:ba:2e:09:d8:
e6:84:7b:eb:c0:3a:1b:04:29:4f:81:05:fe:be:99:
51:43:ab:24:78:9a:89:db:b3:ca:ab:1c:5a:89:39:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:40:41:50:6E:A1:BD:55:FC:24:1A:92:C9:C6:02:11:F7:1C:29
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:c2:cb:83:74:84:ad:ac:4e:dd:46:e9:7d:a8:73:54:45:
e1:63:15:6b:8f:3d:d8:85:46:05:cd:00:ba:4c:14:29:dc:0a:
c8:77:7a:a2:99:ef:2a:fe:91:6d:6f:eb:6a:91:e2:a0:60:29:
58:7f:17:3a:ad:68:02:85:87:89:7c:f3:da:88:5b:98:34:a0:
7d:5c:90:7b:4e:ff:d2:89:ed:03:bd:98:55:29:ba:51:4c:54:
03:5a:73:d2:76:38:85:b2:be:61:bd:5c:c8:5f:f1:10:c2:38:
db:89:41:e1:93:83:d2:70:36:c2:8b:82:8b:3c:4c:e0:bb:58:
b6:fd:8a:75:46:4c:d5:5f:c8:b2:11:ef:79:81:11:9c:08:ea:
00:22:5f:37:79:a1:fd:8a:79:c1:6f:48:1b:1d:f6:38:12:16:
12:fb:b8:3e:58:2f:25:27:c6:01:cb:3f:53:71:52:72:b8:fe:
3f:52:9b:fa:87:57:f9:45:af:3f:12:a9:80:9a:a4:49:ff:c0:
45:a5:db:c4:f3:42:8c:1c:e5:3d:10:5c:1b:24:d4:f8:93:97:
56:ae:9a:f9:c5:4d:16:d2:07:46:ae:7d:67:08:74:c0:29:97:
38:97:83:81:40:db:52:41:43:5d:45:4a:2a:f2:bc:13:84:7c:
5d:dd:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:11 2025 by rpki-client