Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: +9p2nVSmbMu9yNezEVZqL50IJ6QJlcbHZJrk5P56tCo=
Subject key identifier: 3E:E3:CB:3E:42:B9:DE:81:F5:19:93:2D:40:91:00:AF:C6:17:C9:ED
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 019751C6004F69A98D8CE3A7DE2DD369C52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 23:00:20 +0000
Manifest this update: Sun 08 Jun 2025 23:00:20 +0000
Manifest next update: Mon 09 Jun 2025 23:00:20 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: VS4qE5pTi0Ir7UsA8Y52mqR8KnricYgDwIZ8a2UbtuA=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:00:4f:69:a9:8d:8c:e3:a7:de:2d:d3:69:c5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Jun 8 23:00:20 2025 GMT
Not After : Jun 9 23:00:20 2025 GMT
Subject: CN=3ee3cb3e42b9de81f519932d409100afc617c9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:4e:de:aa:9a:80:7e:a3:ed:33:ee:e1:d1:
67:34:8a:44:70:2e:15:90:99:95:ee:33:85:46:b5:
7c:37:d7:e5:99:79:54:11:da:17:13:02:b7:0c:d0:
64:9f:9f:51:22:fb:17:11:69:34:9e:9f:ce:cb:ad:
30:60:0c:c0:8e:52:30:86:d3:4e:ad:37:5a:09:0a:
14:c6:0e:ea:c9:4b:d0:d2:c6:b2:29:ce:52:30:1a:
b8:81:97:40:98:4f:4c:38:f2:21:45:4f:1b:96:f0:
da:79:22:59:0f:6c:6a:a6:48:70:34:1c:90:23:61:
4e:d2:a5:33:d1:2f:33:34:67:ea:2e:88:d4:2f:da:
20:07:0e:6d:7e:52:c5:7a:0a:ff:48:13:4a:2f:00:
07:87:a6:5b:98:1b:c7:cb:a5:68:07:da:3e:7a:81:
1d:51:61:62:e3:8d:a7:f7:69:67:fe:ba:ad:72:ba:
9e:f8:40:78:a6:36:aa:39:d3:73:33:8c:93:f6:7e:
e5:d1:a2:39:6d:c2:8d:a4:01:b1:11:cc:7d:32:5c:
c4:06:15:a9:0b:68:8b:17:6d:9a:8d:2c:09:d4:0f:
a4:c3:5a:b0:2d:da:f3:40:6f:04:c8:0e:4f:1c:e1:
e6:10:97:11:b6:38:c0:e9:ac:91:f2:97:27:06:91:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:CB:3E:42:B9:DE:81:F5:19:93:2D:40:91:00:AF:C6:17:C9:ED
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:bb:9c:23:db:d4:1b:fb:dd:a9:94:95:d5:ea:7e:bc:df:
15:e7:aa:bf:78:13:54:c7:d9:d7:dd:c8:2c:42:c3:7a:4b:07:
00:d0:9c:68:6c:5e:b3:c0:fa:69:57:d7:96:a3:2a:bd:e8:90:
a1:f4:48:af:e8:0a:b1:a0:2e:7f:ba:7d:c4:a5:8d:a2:e7:b6:
ec:5f:8b:bc:09:c9:f8:0a:44:4d:5d:af:62:45:14:95:89:7d:
c6:28:7d:b0:d3:c7:93:a8:78:42:09:88:a6:53:ab:17:30:35:
98:ad:7e:d8:c7:be:28:68:72:da:dd:ed:a2:99:3f:42:b2:7b:
06:68:e4:9b:19:2f:b0:ad:01:7f:bb:8c:8f:9d:b6:aa:ba:c3:
42:e1:60:f3:02:14:c4:f0:60:e6:0b:22:7a:03:8d:a0:98:e8:
cf:59:ad:47:b5:cd:b4:d3:20:41:8b:cd:9c:3b:2e:3b:39:23:
85:b6:13:49:84:03:06:f9:7a:3a:3c:aa:f9:96:2d:a3:69:c9:
fc:91:87:28:8e:5c:0a:56:d2:2a:79:61:d6:b2:fb:8a:ee:16:
65:64:f6:44:eb:da:32:ac:79:fb:a2:9f:9c:6e:ab:27:7a:35:
58:22:30:c7:d1:8c:7d:37:28:72:50:b6:19:a1:07:21:56:76:
f3:24:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:24:08 2025 by rpki-client