Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: zgo9kTSUl3xvoKhRy/eyeRhO2da8+81LwXz+Oi29stg=
Subject key identifier: F0:02:06:21:17:7E:F2:2D:70:D0:19:71:44:B2:DD:30:8C:15:1F:4D
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 01974A0CEED86D62C00937AB3352DEC73759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0975
Signing time: Sat 07 Jun 2025 11:00:50 +0000
Manifest this update: Sat 07 Jun 2025 11:00:50 +0000
Manifest next update: Sun 08 Jun 2025 11:00:50 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: 1QwQSkmj9NoplJn7jEaW44bc6sUE+DNqFmNSBQD+X18=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ee:d8:6d:62:c0:09:37:ab:33:52:de:c7:37:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jun 7 11:00:50 2025 GMT
Not After : Jun 8 11:00:50 2025 GMT
Subject: CN=f0020621177ef22d70d0197144b2dd308c151f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:cc:e7:d9:19:b0:fe:d3:cd:81:17:1d:a1:
16:3a:93:01:a0:44:fd:b5:51:bb:6c:fb:e0:e5:d2:
59:15:d1:3b:8f:76:ad:0e:4e:b5:5c:51:30:61:1e:
11:38:92:87:d7:f3:70:57:3d:5d:11:53:e7:b6:15:
90:7d:d9:be:8d:99:d7:1e:c0:5a:2a:6e:7a:0d:41:
20:43:1c:0f:ba:67:2a:6d:86:ee:85:9f:70:1e:3b:
c1:b8:61:09:29:85:d5:1a:a8:96:c9:ef:8c:77:18:
b7:9d:55:3f:07:c7:a1:0d:24:f4:09:dd:af:55:a4:
ec:4c:6f:9e:a2:4f:24:e8:ec:89:93:2a:e6:db:d3:
c5:b6:29:f8:cf:56:5b:69:bc:ba:76:7b:07:e8:1e:
1a:bc:d3:76:a1:70:1b:fb:11:a0:bc:8f:92:1c:b6:
90:ff:a2:87:15:32:52:7e:14:63:3d:ed:96:7c:9c:
9f:dc:8f:81:eb:de:f2:37:92:45:d0:0d:96:06:a4:
eb:c2:fc:e7:43:03:52:6e:43:fc:41:67:2a:99:b7:
44:9b:18:64:42:e1:e9:9a:7f:18:01:59:87:53:49:
ec:70:f4:93:19:62:67:84:4a:a4:f9:87:17:13:d2:
d2:e7:ed:12:b6:53:08:8b:4d:f4:cd:bd:08:8a:69:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:06:21:17:7E:F2:2D:70:D0:19:71:44:B2:DD:30:8C:15:1F:4D
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4b:3e:41:0a:54:48:00:76:b0:de:56:df:cf:49:f3:4f:81:
8a:6c:50:cc:16:b9:4e:ff:94:0d:80:a1:e6:cf:8b:07:d9:05:
31:11:b8:94:6b:ee:52:2b:2f:30:6c:80:d0:a9:13:19:87:08:
fc:e7:dd:3d:68:b4:94:aa:c8:ee:2a:8c:49:37:49:cf:3d:9a:
3f:e8:89:ea:45:8f:09:6f:83:60:3f:02:26:de:37:90:85:c8:
9a:f1:7c:08:20:a6:b5:23:00:9c:f8:0a:c6:b7:4c:b1:cb:e0:
59:bc:45:a3:b0:d3:57:b4:58:cb:c3:e0:51:dd:99:3a:db:f4:
62:1a:63:29:fc:60:c6:a7:b4:b6:71:23:24:69:4a:06:a3:82:
6c:ec:48:e8:f5:c8:5d:5f:c3:fe:4c:45:85:b7:89:1f:88:38:
ad:0a:6e:8e:dc:25:a5:c0:c7:10:1d:39:0c:f8:b6:9e:7f:b1:
ca:94:7e:ac:d6:3a:5f:f3:13:1c:6e:bc:a2:ce:7a:99:1b:a3:
79:f2:e5:d0:5d:e0:09:d1:26:fa:5a:eb:4c:92:ab:08:99:34:
b4:92:3a:f1:23:3e:64:65:43:aa:08:e0:cc:f9:0a:b7:f2:c9:
c8:8e:67:f3:66:ee:ae:d7:f2:78:ec:23:91:dc:ac:84:85:06:
ee:56:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:41 2025 by rpki-client