Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: u9Th6Kn1LHOc8nyF66baoaok2dCpxQ2pJlp4OiHz6f4=
Subject key identifier: 21:11:6D:F0:88:75:8F:F7:EF:1B:0C:71:A7:A4:EE:12:B0:BE:A4:A4
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01974B1F92F0A1FB13D48F0BC3808961A848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:49 +0000
Manifest this update: Sat 07 Jun 2025 16:00:49 +0000
Manifest next update: Sun 08 Jun 2025 16:00:49 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: atukSlH15awUwyjjHGMreDVF6CBlx1iuwKrSmilkJ2I=)
2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:92:f0:a1:fb:13:d4:8f:0b:c3:80:89:61:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Jun 7 16:00:49 2025 GMT
Not After : Jun 8 16:00:49 2025 GMT
Subject: CN=21116df088758ff7ef1b0c71a7a4ee12b0bea4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:10:0b:cb:91:8e:7e:b0:a4:aa:f9:bd:06:
c0:78:6b:d6:29:22:d1:63:b4:09:19:92:61:43:43:
55:fc:43:97:22:42:d1:09:d6:ef:bd:19:b3:71:b9:
63:27:3e:a0:43:b1:d3:6c:75:a1:d5:37:87:6f:c2:
7a:31:04:9b:bb:db:94:a1:f9:20:0d:5c:ab:1d:1b:
af:b5:f2:b8:24:2b:77:7e:44:7d:3a:d1:77:3e:a3:
3b:7d:c3:38:70:97:04:9b:2b:66:cc:0a:d7:c9:0f:
79:b7:5b:a0:74:d2:69:a4:0a:a1:0b:5c:14:36:a3:
82:ce:96:06:e3:21:ae:56:33:61:3f:71:6b:4d:39:
a2:ae:56:0b:89:e8:84:c7:7e:bf:2b:e0:df:5f:d4:
d0:f2:61:68:e6:b6:c6:2c:27:48:5b:ac:5a:b8:52:
c1:7b:f5:97:c4:98:66:0b:d7:23:79:99:00:12:b6:
43:40:98:ab:ef:70:67:f8:b4:07:d6:5c:d8:d5:91:
2e:05:e7:d8:93:71:d5:68:bf:5f:39:0e:18:d0:4e:
1c:4a:6c:4b:a0:8b:bb:31:ae:78:5b:4c:72:d7:b3:
bf:ff:4b:d4:60:28:ad:91:ba:96:42:c9:91:b7:5a:
57:da:b3:9b:2c:50:84:5d:8c:d2:8b:5b:d5:cd:50:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:6D:F0:88:75:8F:F7:EF:1B:0C:71:A7:A4:EE:12:B0:BE:A4:A4
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:75:fd:63:81:c8:6e:07:59:dc:0e:18:04:ad:95:8b:29:03:
0b:86:79:06:23:4a:a2:74:28:a3:8c:83:22:28:32:f9:cb:dd:
18:80:30:b2:fa:5f:04:5e:88:f8:2b:3c:48:8b:1f:56:8f:4d:
63:45:9f:39:21:2c:d6:ee:ef:4d:b1:5c:8a:b7:43:75:ce:a4:
7e:a9:e9:cc:26:e5:4c:fe:c5:02:d1:87:74:66:a7:c1:02:5c:
6a:28:4c:3b:a9:84:14:3b:a7:c7:05:12:fc:75:e2:46:06:ce:
09:d3:42:c2:53:71:51:c6:ab:e9:2c:11:56:9d:c8:30:80:51:
ca:15:f3:d0:72:c1:cd:11:06:6f:a0:be:b8:4e:83:b8:4c:10:
77:c3:ac:eb:48:fd:cd:68:d2:88:52:cb:9b:ad:92:fd:b3:72:
ce:62:68:0f:28:1c:21:ab:dc:bd:0f:87:c5:d9:b8:bd:60:3b:
f0:b2:e9:d3:e2:eb:67:68:d5:5c:28:2d:c8:e9:3d:b7:7f:d6:
10:d4:21:1e:ec:a1:de:42:24:c9:2f:6d:f8:27:28:0c:a9:d5:
f3:77:89:33:ca:ea:8d:35:97:9f:ef:af:a0:4e:a8:12:9f:53:
cb:df:0b:b5:a2:cf:e3:da:ed:f4:64:fb:fe:4e:33:b9:1c:92:
15:a8:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:18 2025 by rpki-client