Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: x2sJeWvDE+kYKbyxpbiyiUrk+2q7MoZVAAvZL0GNNLE=
Subject key identifier: D2:57:D3:A6:71:16:4B:50:12:F9:CD:88:23:64:DB:08:A0:5D:A5:2D
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 01975EDD4F4CC7D75518B41785D8DD8BED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 12:00:51 +0000
Manifest this update: Wed 11 Jun 2025 12:00:51 +0000
Manifest next update: Thu 12 Jun 2025 12:00:51 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: r3IPNe2/l1+8B2vEWGwQvxhKmvj/FOIwtXBKaYioXic=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:4f:4c:c7:d7:55:18:b4:17:85:d8:dd:8b:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jun 11 12:00:51 2025 GMT
Not After : Jun 12 12:00:51 2025 GMT
Subject: CN=d257d3a671164b5012f9cd882364db08a05da52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:3c:f2:20:02:be:ea:5e:3a:45:69:dd:9e:
64:ed:1c:d4:df:4f:4f:fe:f7:2c:90:9f:97:75:9c:
78:c7:66:72:a3:bb:51:be:dc:91:5a:3d:ce:74:9f:
d6:cd:b5:25:37:a8:ed:3c:3d:98:7a:7e:a6:4d:43:
8b:85:9e:c7:f9:7b:c8:69:b9:f0:29:23:fd:88:90:
a8:f0:c3:71:a7:e2:4b:da:87:27:c5:8b:6b:90:00:
dc:36:7a:4c:d6:79:a4:bc:96:d3:d7:2c:95:22:a3:
c7:d2:92:ad:5f:2c:1c:54:d9:ef:61:c4:0b:1c:f2:
16:59:d0:27:21:cd:39:1a:ea:d4:47:9c:97:18:8b:
cd:01:4a:95:ee:3d:9b:e5:0e:41:32:47:66:ee:bb:
5f:0f:5f:7c:10:95:f3:39:35:cd:44:3d:88:1b:bd:
33:f1:60:c9:e0:b6:7d:72:9a:d9:86:a8:c9:d3:28:
71:5a:c7:27:9a:fe:88:f2:b7:50:62:9a:d0:88:ef:
65:8a:a5:f8:a7:c6:a3:30:98:27:11:41:49:c8:b6:
3d:01:82:10:3d:48:dd:66:18:5d:5c:5e:b6:14:db:
b4:ba:43:0b:f3:7d:ee:8f:60:55:3f:5c:e2:f0:6d:
7b:84:6f:a6:3f:64:c9:5f:ab:46:36:0d:f2:d8:40:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:D3:A6:71:16:4B:50:12:F9:CD:88:23:64:DB:08:A0:5D:A5:2D
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2d:d9:06:bf:b2:aa:14:53:a7:d4:93:42:54:a7:ae:4b:f8:
2a:4f:5e:db:57:61:5b:88:7a:e8:4a:4a:0d:43:86:cd:13:f2:
f4:17:d9:0c:8e:da:70:4b:94:4e:bb:68:b6:8e:ce:04:73:04:
b0:fd:0c:83:48:99:f8:52:09:5d:e7:fb:21:75:45:7d:d0:57:
e7:fa:d9:56:b2:8b:6e:16:26:f4:8c:ee:89:b6:29:de:2d:03:
51:14:ea:c4:dc:ac:11:6a:4d:1a:69:2d:71:83:40:5f:73:38:
2c:af:9d:d7:f3:44:41:f1:b2:4b:5a:f4:75:c8:7a:c3:26:e8:
c9:df:5c:36:f8:6d:e6:f0:e3:7c:47:66:60:05:0c:b3:90:cb:
d8:52:e7:63:70:f5:6b:12:5e:d4:37:9b:31:de:07:0f:66:c7:
7d:3d:c3:18:f1:29:13:6d:0d:3b:75:aa:2e:82:86:47:07:f6:
7b:d2:ef:b4:da:3e:0e:7c:11:4f:43:2c:99:2d:eb:42:0a:45:
1b:cb:2c:5a:35:13:22:1e:e6:49:37:50:15:87:2e:06:02:63:
db:e8:2c:70:3f:28:11:09:f0:c9:6f:a6:be:15:62:3f:14:d2:
b5:74:09:44:93:62:45:37:df:8e:44:7a:4f:9d:21:97:e7:bc:
10:01:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:46:42 2025 by rpki-client