Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier: uJKX4neYyCGTxeXcqXEkKb3oDkniB/GL4eRmlna3eus=
Subject key identifier: DC:D2:46:0B:C0:A5:C2:79:DD:CE:39:E5:4C:28:13:2B:79:FC:E2:03
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer: /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial: 01975836330FD2392298E1F4A5460883887F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number: 045A
Signing time: Tue 10 Jun 2025 05:00:36 +0000
Manifest this update: Tue 10 Jun 2025 05:00:36 +0000
Manifest next update: Wed 11 Jun 2025 05:00:36 +0000
Files and hashes: 1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: MGe6EYarkoTFkz8SpLBkSFr3v36nTpvYbh/9kWeVy0Y=)
2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:33:0f:d2:39:22:98:e1:f4:a5:46:08:83:88:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
Validity
Not Before: Jun 10 05:00:36 2025 GMT
Not After : Jun 11 05:00:36 2025 GMT
Subject: CN=dcd2460bc0a5c279ddce39e54c28132b79fce203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:3b:97:bd:f2:b7:01:f9:0d:e9:10:ab:1c:
e3:4c:aa:c7:2a:df:26:af:dc:8a:e8:6d:14:fd:7d:
14:95:a8:8c:58:c0:9b:aa:a7:d7:6b:ff:85:c7:f3:
8a:d5:33:8b:a4:1f:30:6f:ab:84:e4:3d:49:6f:93:
31:97:20:5e:f8:a8:25:2b:3a:6d:fa:7b:d5:97:ed:
73:2e:be:8e:53:ce:e2:49:63:49:1e:f4:e5:71:b2:
5c:06:75:65:35:2c:e4:1d:85:1a:26:3f:cf:a3:b3:
97:dc:39:23:b5:0c:f8:e0:18:fd:8a:bb:f0:29:b0:
67:81:d0:12:35:ed:c6:9f:e6:16:55:c1:c9:1a:9e:
8f:10:6a:18:28:2f:91:69:ab:42:34:0f:12:7f:a9:
f7:58:63:e3:0e:5b:8a:23:f3:09:83:49:5e:da:25:
96:ff:9f:ea:47:36:a5:26:88:b8:f3:ae:d0:91:84:
6c:e4:dd:a9:cc:d3:3b:14:a1:b9:58:14:48:c8:1d:
10:ee:11:a8:3d:99:40:53:1f:09:b7:26:77:da:02:
80:cf:31:ec:5a:06:3e:69:2d:b8:e7:06:af:df:de:
9c:ff:ec:0b:eb:ad:ad:ae:b8:9b:96:d3:6d:e3:78:
ea:a6:20:e2:09:2b:90:07:0d:73:a6:e7:f5:51:e5:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:46:0B:C0:A5:C2:79:DD:CE:39:E5:4C:28:13:2B:79:FC:E2:03
X509v3 Authority Key Identifier:
keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b2:90:7d:05:89:28:a3:ee:e6:74:3f:d3:a2:f3:a1:b0:31:
f3:9d:73:35:8c:34:4b:e7:94:e9:62:b1:14:b8:8d:c7:ed:f6:
5d:3e:ec:bf:9b:0c:64:7b:49:0d:89:ef:52:e2:7b:33:ab:1d:
00:2c:0b:6b:8f:60:83:70:c7:c6:02:f6:c5:11:d5:b7:f7:d8:
b3:7d:9f:ee:af:ec:c4:13:fb:9d:64:f8:74:c3:7c:51:d1:67:
0b:97:5f:57:a8:b6:27:dc:e6:95:3c:db:3a:f0:60:4b:89:ec:
82:ab:fc:d4:02:c8:a6:30:8a:ad:ca:ce:55:6a:c6:37:89:0e:
2c:a0:b3:9a:91:db:03:f3:5a:bb:3b:e3:77:05:34:e9:13:31:
4d:e6:b2:63:3b:6e:47:5f:da:90:92:55:74:9b:95:bc:c4:6c:
81:26:cb:eb:2f:3d:bd:24:af:10:ee:09:0d:65:54:bb:eb:da:
c7:8c:13:f4:65:f7:3d:11:7b:1b:42:33:c2:2a:48:9d:c3:0e:
e4:09:18:fa:c2:ea:04:c9:70:a1:21:83:0c:17:a7:31:7f:27:
9d:89:eb:f0:87:f6:ee:a6:93:7b:3e:b5:04:51:97:2a:e1:c4:
e7:70:04:cc:e9:cc:c4:33:7d:df:63:2a:63:04:3e:e9:ee:ca:
05:1f:10:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:10:25 2025 by rpki-client