Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: kW0LAnNo517wmkLZ7z5cQZ22QvIz8i4zNzrxCgdcomU=
Subject key identifier: ED:E3:93:2A:7B:6F:E1:01:3E:9B:1A:9C:2B:B9:5A:F3:8C:C3:9B:17
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0197621545760186A54EEED479FE2343ACFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0E89
Signing time: Thu 12 Jun 2025 03:00:50 +0000
Manifest this update: Thu 12 Jun 2025 03:00:50 +0000
Manifest next update: Fri 13 Jun 2025 03:00:50 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: CV7QXYvw4uC2SCUUnIFQ9v1JySStJjUgxTUiO+IRIo4=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:45:76:01:86:a5:4e:ee:d4:79:fe:23:43:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jun 12 03:00:50 2025 GMT
Not After : Jun 13 03:00:50 2025 GMT
Subject: CN=ede3932a7b6fe1013e9b1a9c2bb95af38cc39b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:af:89:a1:dc:92:9e:63:41:0d:19:10:1f:
35:94:0c:c0:c9:ee:1e:37:cf:5f:c5:7e:fd:c0:2f:
b0:6f:4a:ff:57:75:b9:52:06:b6:9d:92:11:91:fd:
ad:13:f6:4e:2f:a1:77:21:8c:19:6b:fc:bf:2a:1c:
61:78:a1:46:60:95:7f:5c:92:d7:d2:86:5e:31:34:
a6:af:6e:12:bb:79:6e:59:ae:73:bd:74:33:8a:18:
28:2b:a1:75:5a:10:7c:c5:68:9a:79:a3:9a:32:74:
9c:6a:d1:3d:b2:e4:fa:56:e0:36:ac:f9:a6:fb:6c:
7d:9f:94:be:6a:54:35:c6:fb:30:36:8e:a3:68:55:
d3:07:fe:37:9e:fb:d7:6e:9a:26:b7:eb:35:8c:f2:
21:4b:19:5b:fc:aa:37:5a:59:ec:53:d2:e5:99:6d:
2f:0a:df:b6:4b:64:3f:81:84:6e:29:9b:09:88:04:
84:46:4c:29:d3:bf:0e:96:a0:74:ed:af:0a:bc:98:
70:15:3a:be:2d:54:71:b4:d9:a6:06:1f:e8:c3:86:
b9:21:25:fb:c4:e8:e8:17:3d:43:7f:f8:d9:0e:20:
70:82:66:e7:69:1c:59:3c:62:8c:ac:da:5c:23:85:
ea:c9:8e:cb:cb:02:bd:d9:5b:7a:ce:ba:db:fe:26:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:93:2A:7B:6F:E1:01:3E:9B:1A:9C:2B:B9:5A:F3:8C:C3:9B:17
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:bf:f6:9f:05:83:04:c6:bc:ff:03:97:64:9c:bb:b0:83:
69:66:9f:55:18:1c:1e:ab:26:e4:01:bd:d5:17:b9:79:39:26:
87:53:ba:6b:06:c3:04:a2:46:5a:a5:1f:c1:0f:e6:2d:48:6a:
97:36:fa:7c:5e:f5:ba:7b:9e:44:fc:0a:55:c5:7d:85:5c:65:
69:72:de:b1:61:e8:50:20:94:c7:ed:a8:8b:86:c9:93:64:d6:
a3:cf:4e:8e:f4:51:78:a9:be:66:ae:fb:77:63:6f:72:8e:79:
19:64:51:6b:92:b8:11:c7:1c:17:26:db:5e:3e:37:d9:89:80:
36:da:66:fe:12:84:67:c4:ab:0d:c4:de:35:aa:fe:5f:d8:a1:
95:91:be:88:4e:cb:6d:50:64:3c:17:dc:5c:6c:86:cd:e8:20:
d4:c9:65:56:ea:10:97:84:5b:95:da:57:7f:9c:71:be:de:f2:
2d:03:89:36:86:0b:39:7a:44:2f:f9:06:8d:cf:78:41:9e:8a:
b5:d2:af:67:11:66:38:e0:fe:29:45:e2:34:4b:b8:c8:bf:e9:
82:f2:a8:02:c6:bb:5e:60:ad:aa:ce:f2:13:0a:a7:5c:6b:94:
e1:29:7c:55:b2:49:83:ae:cb:84:2e:2e:0b:4e:70:64:f5:57:
68:5e:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:46:49 2025 by rpki-client