Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: ecHNRNPGnwqYeWiDH7WiKO/ZRRsNwvwQXpLwHe0a9Io=
Subject key identifier: 23:EC:74:36:52:B7:BE:43:52:05:76:C5:AD:6B:5E:B4:8D:D2:BD:2D
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 01974AE945A6005C3D82A22D965EDCA91FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 15:01:31 +0000
Manifest this update: Sat 07 Jun 2025 15:01:31 +0000
Manifest next update: Sun 08 Jun 2025 15:01:31 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: cPMM01sD+JvVVrliur6f4UJ3kYaqFO8Ec6FQV/5xitc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:45:a6:00:5c:3d:82:a2:2d:96:5e:dc:a9:1f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Jun 7 15:01:31 2025 GMT
Not After : Jun 8 15:01:31 2025 GMT
Subject: CN=23ec743652b7be43520576c5ad6b5eb48dd2bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:2e:46:24:c9:5f:c0:4d:f6:12:52:a2:d6:
60:68:7d:04:bd:fd:88:92:ee:ef:74:27:78:e4:ee:
5c:cb:a0:52:59:52:6f:da:18:4c:e7:e6:f6:7e:b5:
47:e2:53:12:47:b2:d6:8d:3d:57:10:a9:9d:74:07:
10:cb:93:26:cc:a7:a5:d6:54:1d:5c:5d:e0:0f:d6:
89:a0:aa:76:9a:84:1a:97:dd:4c:39:f5:72:72:4d:
9a:e6:1e:36:b0:24:29:d6:19:1c:f3:df:08:32:b1:
32:1f:cb:2d:66:95:b2:2a:60:31:77:de:c3:ca:0f:
6b:bf:82:db:d4:af:da:1b:36:36:ab:aa:3f:44:3e:
2e:8b:d7:15:f3:35:6a:4b:b6:2e:28:df:66:b9:51:
5b:ac:be:05:0a:b3:f0:56:96:a5:84:d5:c7:b6:4e:
9e:32:0e:07:fe:32:9c:99:f2:fa:44:a3:d0:ed:c5:
26:d3:fc:20:1d:ad:bf:f2:1c:1f:b2:a3:dd:25:4e:
f8:0f:ad:1e:d0:16:f8:84:c3:62:5f:7a:43:ec:47:
cc:cd:a5:55:0c:f6:a6:3e:5e:0b:99:86:6d:2b:19:
e5:73:b7:f0:4a:39:ce:61:cd:67:d1:9f:99:78:58:
a1:db:74:ba:d3:fd:9c:c6:b6:15:e1:c0:61:f1:0b:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:74:36:52:B7:BE:43:52:05:76:C5:AD:6B:5E:B4:8D:D2:BD:2D
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bb:6b:e7:04:c5:dd:3b:ff:87:09:35:d4:16:7d:c9:f0:81:
a4:1c:a3:d9:89:06:99:2f:49:f2:c8:0d:6d:c8:93:fa:d2:69:
e0:1f:f7:99:54:0a:fc:c3:bd:9e:5a:35:94:2c:c2:f2:5f:dd:
aa:68:df:11:60:95:ad:e9:3a:d0:d9:03:3c:9d:0b:6c:10:46:
a0:4f:b1:6c:86:68:a9:3b:c9:7c:5a:60:a1:24:50:3b:6b:89:
b5:ad:f5:d9:04:7b:c0:f6:8f:3e:b5:24:61:68:8a:ec:e1:d0:
cc:54:1a:20:91:3e:26:c7:5e:d2:f0:13:49:bf:4b:16:30:c1:
50:0c:65:6c:96:d6:65:9a:21:19:be:ca:3b:c8:bc:3f:4b:fd:
f0:ea:45:8c:d9:3f:89:f3:e7:ec:9f:8c:c4:dd:08:ae:60:c5:
43:8f:4d:41:b3:70:82:3c:34:89:c7:49:73:60:a1:a2:40:f1:
92:00:2c:6c:50:b7:ff:29:f2:57:78:1b:f0:66:c3:8f:aa:c3:
7e:10:34:15:bd:9e:5f:0e:f1:0e:68:7e:21:1f:4c:31:3a:07:
f4:08:7d:e5:b1:d1:4a:1b:34:ac:08:b4:51:20:0d:65:bd:a9:
71:e9:b0:43:55:22:56:85:ae:91:5d:a7:56:bc:d8:dc:02:ff:
14:39:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:27:59 2025 by rpki-client