Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: XM+Ri4dQ6mqM4JYNMDIu8iNd1davK+5MQkqwNMZzsEM=
Subject key identifier: AD:8E:05:E2:B5:6E:5F:B7:90:52:08:01:DB:FD:2C:F8:97:92:1F:CC
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 019760CB44441D978C418CB285FA91A864F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 21:00:23 +0000
Manifest this update: Wed 11 Jun 2025 21:00:23 +0000
Manifest next update: Thu 12 Jun 2025 21:00:23 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: JqMN6BeuXIg3JLXpHNeJpjQb67oJGXFwXSMukDMvrVw=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:44:44:1d:97:8c:41:8c:b2:85:fa:91:a8:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jun 11 21:00:23 2025 GMT
Not After : Jun 12 21:00:23 2025 GMT
Subject: CN=ad8e05e2b56e5fb790520801dbfd2cf897921fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:7a:25:7c:d8:d2:34:fd:a7:1c:17:10:0f:
87:ca:10:d2:9c:fa:58:87:c5:84:c8:b9:e1:2b:63:
ef:e9:93:a3:fc:a2:a6:b1:66:12:8c:f3:2a:81:95:
9c:fc:46:bc:cb:ce:b7:83:88:a4:27:00:bb:ba:72:
80:ae:4d:e4:69:44:ff:36:6d:4e:32:8b:cc:f9:e5:
d7:60:d0:55:fc:fa:98:f5:94:dc:94:65:12:fe:59:
0f:3a:08:e7:0e:c8:4a:d0:82:09:9b:50:d7:d2:6b:
a8:6f:c1:56:8a:81:5b:cd:b0:48:3c:52:86:33:ab:
cd:eb:b5:de:12:11:8b:1b:06:b8:21:e1:c4:d0:81:
28:88:8d:89:b5:25:4a:4f:65:4c:e4:c9:24:04:e3:
fe:1f:e2:65:19:24:a4:d2:fc:ab:eb:c0:3f:77:f4:
c2:a9:9f:ae:6c:7f:be:91:a5:50:cf:07:00:53:96:
3f:4e:41:33:44:2c:88:e6:05:f9:f2:06:26:f6:14:
07:fd:b1:d5:4f:6f:53:fa:5c:59:58:6f:3f:f0:0c:
32:fd:35:20:c9:b7:b8:10:ca:9c:ba:5f:ff:37:d5:
d7:45:a6:db:44:04:9b:84:0c:d0:04:dd:36:e8:25:
03:9f:56:5e:c9:6c:2c:7c:c3:ee:e6:0c:64:f9:f4:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:05:E2:B5:6E:5F:B7:90:52:08:01:DB:FD:2C:F8:97:92:1F:CC
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bc:b8:0f:a0:4f:4b:69:e7:26:e7:d0:6c:e2:09:ca:a2:47:
93:74:d3:42:91:04:ca:9f:d7:04:b9:1d:8f:7d:c8:50:71:94:
d4:4a:87:01:29:f6:cd:7c:a9:d6:97:c1:a8:ff:32:fe:04:67:
e4:8d:d3:9b:c7:84:24:db:0e:8f:5c:56:4b:d7:dd:e3:50:a6:
0e:eb:31:bd:a6:b0:59:b7:a0:9b:2e:f8:53:66:bf:c5:73:e7:
81:80:48:69:cc:57:e9:47:4f:ea:32:9f:b6:ad:64:3e:35:e0:
0a:00:50:a1:ab:fa:75:17:a0:de:b4:46:c6:fa:ca:2d:47:f7:
74:30:f3:da:33:b7:91:d9:78:5e:26:b9:b6:35:2f:6c:ed:29:
8e:78:74:cf:53:06:1f:bd:1e:3a:3b:be:63:6f:23:21:4c:2c:
bb:f8:94:93:02:25:e9:1d:0b:0b:74:39:b8:53:d7:8c:84:05:
9f:b3:f1:4c:83:1f:64:e0:ee:a3:72:c5:1e:2d:49:d5:57:be:
0f:06:fa:76:f0:7f:47:8b:9b:93:32:f6:8b:1f:52:1c:92:45:
24:80:a0:7c:59:3f:06:77:56:79:d1:68:46:d3:62:a4:b5:91:
2c:d9:2b:7b:5c:62:6a:2b:24:24:33:32:62:ec:67:a7:64:78:
a5:bd:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:43 2025 by rpki-client