Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: UpKkN+om07/KtvOltLxc8lgvrc9UNU0jwCZ3jqFkU/k=
Subject key identifier: 7E:70:74:9A:F9:2E:CE:A4:63:E2:23:7C:B9:59:4C:28:41:35:80:F6
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 0197496861EF859F41BA0F2F5D71D07C4985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 08:01:06 +0000
Manifest this update: Sat 07 Jun 2025 08:01:06 +0000
Manifest next update: Sun 08 Jun 2025 08:01:06 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: GcP1KHdJEYJcQVpSgZMQa7Ea8LIWoW0XNA38hwlwBHo=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:61:ef:85:9f:41:ba:0f:2f:5d:71:d0:7c:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Jun 7 08:01:06 2025 GMT
Not After : Jun 8 08:01:06 2025 GMT
Subject: CN=7e70749af92ecea463e2237cb9594c28413580f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:f2:99:48:3e:50:b9:4e:f5:74:95:cf:b7:
0d:db:74:00:b9:70:ff:dc:ad:68:a1:d3:8d:b4:97:
79:2d:d6:2a:f8:ce:d6:0b:a7:1c:e8:e6:cc:18:4c:
2f:b9:a5:08:a6:5b:0e:b9:e3:81:1a:9a:ec:a8:ef:
f0:3e:b9:cd:38:a3:17:fd:e6:84:8a:64:80:82:85:
03:08:64:58:5b:24:cc:b4:a2:fb:ae:0e:8c:c8:b0:
85:af:57:9f:28:48:d6:17:e0:22:01:68:e7:86:8a:
aa:65:1f:3b:b2:5d:71:17:91:56:09:47:cd:98:de:
c1:0d:40:6a:b8:f0:2a:26:e6:bc:70:11:79:56:51:
8a:8a:f2:1e:7f:da:62:81:a7:7d:65:af:df:ba:b2:
69:d8:e2:bb:5c:3c:c7:d2:fc:f4:51:90:41:ed:c7:
fb:fc:a2:66:ba:ae:c6:64:6f:75:dd:5b:41:e3:13:
67:57:15:fa:fa:f8:8e:7b:aa:fb:23:87:46:b4:45:
6b:dd:d6:98:79:11:92:72:1e:cc:78:89:89:f5:16:
15:80:c6:cb:d5:78:2e:6d:e2:bf:8f:b8:0d:66:ca:
6a:c5:46:dc:67:bf:a2:19:da:d7:df:0d:be:a0:36:
7a:bb:4f:bb:2d:ce:27:ee:64:ab:df:95:36:80:70:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:74:9A:F9:2E:CE:A4:63:E2:23:7C:B9:59:4C:28:41:35:80:F6
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:14:72:88:d3:f9:a2:99:6e:89:52:80:e6:17:51:21:1a:
94:e5:2c:45:ae:e2:3b:b3:4d:e5:09:b9:90:79:0d:8f:71:3d:
e2:ad:f8:84:99:3d:b9:78:fc:e6:1a:91:81:20:7b:51:c1:51:
bc:60:96:23:06:52:77:6a:0e:d2:2e:ef:ee:ab:d5:4a:e5:15:
0b:13:bb:67:bd:53:6a:da:07:c0:64:6b:6b:ad:b1:d6:ae:23:
a1:c9:e6:0c:75:ac:ad:a7:a6:b3:ee:1c:92:6b:c4:b6:36:41:
cb:5d:d7:16:9d:6f:3d:c4:cc:f8:82:dd:67:09:00:d9:c5:46:
5e:51:a7:44:d7:52:24:8b:dc:5c:e4:a8:59:f1:c0:34:c9:40:
97:bf:44:2e:b9:4a:03:5b:3a:51:d3:91:5d:d6:63:1d:e7:cb:
c8:c2:4b:5c:19:fd:24:a1:4e:9d:74:c7:e3:5f:dd:9d:98:97:
81:89:2d:54:61:08:f1:a4:f3:64:f1:41:9d:03:ea:75:35:6e:
2a:ab:fc:7d:36:98:64:4e:9b:db:e1:d4:52:2a:c9:8c:6d:0c:
0c:c4:15:cb:a3:03:72:66:cd:9b:30:55:6a:49:e7:70:11:20:
39:0d:41:b5:79:05:23:34:b4:40:fc:f5:39:35:2a:f3:e1:61:
d2:e8:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:25:21 2025 by rpki-client