Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: xAwqhrImWnXzLKGn50UQZoBSszKu6PcgOXQj3v7xSPA=
Subject key identifier: 44:4C:63:48:ED:23:FB:E3:38:B5:1A:BB:AA:54:AD:8D:CF:7D:2C:8E
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 01975C13395F7D9D21A23E97354AE13C29DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 23:00:53 +0000
Manifest this update: Tue 10 Jun 2025 23:00:53 +0000
Manifest next update: Wed 11 Jun 2025 23:00:53 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: XcGfJOaCJ3ZctLGEHPEV9Rszd4ral9fjS8GgbIseWj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:39:5f:7d:9d:21:a2:3e:97:35:4a:e1:3c:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Jun 10 23:00:53 2025 GMT
Not After : Jun 11 23:00:53 2025 GMT
Subject: CN=444c6348ed23fbe338b51abbaa54ad8dcf7d2c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d3:c7:01:99:3a:fc:c0:45:30:c1:56:ff:58:
b2:9b:6b:64:f7:3b:59:05:9b:cb:aa:ce:d6:d9:5a:
f2:2b:3b:ba:8c:41:83:d0:0a:1c:7c:58:37:65:e6:
75:f1:42:92:d8:b9:7b:f6:8c:65:61:20:fd:ae:a8:
b8:0d:7d:ec:aa:52:2d:8a:c1:98:38:cf:99:36:58:
bc:5a:31:98:2a:c8:a0:09:69:3b:f9:3c:47:c0:43:
97:93:86:85:2a:0c:53:c8:90:75:09:1f:d6:30:68:
13:a4:01:86:7c:59:4b:14:8a:86:b8:b1:18:d9:d9:
0d:31:2a:57:9e:3d:88:c1:4e:3a:09:67:e1:b7:d2:
c0:ad:df:dd:bc:5e:a0:bc:9e:1f:9a:4c:8f:a4:5a:
1f:bc:c4:7d:7e:3d:6e:e9:db:f1:ae:4a:5b:b0:f7:
de:3f:03:ea:04:32:46:2d:0b:20:65:76:ef:e5:e0:
04:59:7b:b5:81:8d:0f:79:f7:90:d9:4b:d3:d6:0c:
82:c3:9c:e6:40:a5:e8:8a:04:80:8c:41:02:e1:94:
06:6e:24:3f:b7:f0:2a:c5:a2:7e:ee:0b:ba:88:29:
64:df:3d:2b:bb:b2:f4:df:16:ea:30:d6:de:a4:35:
4f:43:e3:fd:ac:42:a2:19:73:b5:63:d5:57:2a:0d:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4C:63:48:ED:23:FB:E3:38:B5:1A:BB:AA:54:AD:8D:CF:7D:2C:8E
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ee:ad:64:c7:77:33:a8:45:85:d1:7f:af:d9:8d:df:18:15:
a7:64:02:b1:af:e6:b7:99:ee:1a:b5:f4:33:37:70:4f:eb:8c:
a8:c9:17:3a:b6:e0:cc:8e:42:89:ee:4d:3a:53:d5:04:e1:98:
47:f8:fc:63:e9:db:a8:51:ad:76:c6:eb:82:52:99:4d:59:93:
d1:73:2d:f1:81:b3:90:51:4c:ec:e0:ef:9b:19:d2:95:67:7d:
a1:e6:9b:9e:cc:72:74:fd:b8:62:f2:08:d5:43:dc:18:64:fa:
98:76:c5:3b:52:22:79:6a:06:7f:75:5e:50:ea:f7:bb:b0:e4:
07:f8:18:0e:2c:7c:fd:bb:85:66:4f:2f:e8:05:29:32:fd:57:
ee:42:9a:e7:05:d5:57:a0:ba:0d:29:b5:cc:19:2f:52:13:f5:
fa:c0:fb:bf:33:57:7d:3a:c6:01:78:82:9a:e2:23:6e:40:e5:
92:66:bb:77:88:96:1c:da:30:89:6e:26:7a:18:69:7c:48:72:
1e:f8:55:53:a3:67:44:d5:2a:39:f2:75:30:4d:7a:32:c1:fe:
a3:17:17:90:37:14:c1:cc:4d:06:fd:ab:62:24:b0:72:fa:78:
ca:26:26:72:1e:8a:fd:29:22:41:71:ad:d4:7a:7e:dd:42:08:
5d:8f:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:13:22 2025 by rpki-client