Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: BiBsvuXaaQHjsvB4tIQSxvLGcedL4rqXpU1BceEa1d4=
Subject key identifier: BC:40:82:E7:C0:0A:BD:2F:68:65:83:F4:66:23:D0:6C:1A:FF:B1:D8
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01974A0CFBEB3C88E9F5F5DD6D09004A6D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0D4A
Signing time: Sat 07 Jun 2025 11:00:54 +0000
Manifest this update: Sat 07 Jun 2025 11:00:54 +0000
Manifest next update: Sun 08 Jun 2025 11:00:54 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: 8syDCcUCpimFO1T5fxaLESznjfNg7H2psEW0adTw2xw=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:fb:eb:3c:88:e9:f5:f5:dd:6d:09:00:4a:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jun 7 11:00:54 2025 GMT
Not After : Jun 8 11:00:54 2025 GMT
Subject: CN=bc4082e7c00abd2f686583f46623d06c1affb1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:d3:be:7e:c9:d0:c9:7e:aa:1f:6a:9d:2e:
92:cb:1b:74:be:e6:26:fe:ee:5f:9b:90:73:96:da:
fd:59:fe:65:49:31:4a:49:ae:e6:36:af:db:c5:73:
97:ed:0c:b5:96:d9:c3:b0:e4:13:2e:58:6c:75:db:
c5:ca:61:95:4d:54:ea:f5:38:70:47:13:01:ec:f5:
b8:0c:59:50:c1:94:73:ed:fa:71:12:58:ce:f6:1a:
48:c2:b3:7c:1b:7b:39:c8:66:5d:d6:9d:c4:1f:0a:
bd:fa:53:be:01:ab:b8:3f:9c:c8:30:59:1a:d2:25:
7b:85:2f:98:dd:cc:70:94:94:99:7e:af:a7:72:bc:
c2:05:ca:05:32:ef:2d:cf:65:f3:52:55:0f:5e:86:
5c:7e:9f:db:21:de:28:0b:03:c8:11:a0:33:f7:1c:
42:05:63:16:9d:06:11:89:38:ce:8a:d5:d9:0c:22:
b7:e0:f5:8e:b3:7c:cd:5f:a8:58:2e:a6:7f:94:24:
b3:6e:2d:eb:bb:9e:9a:a6:d9:bb:60:3c:52:64:70:
b1:83:2b:60:7d:9f:e5:80:13:a6:aa:de:5f:2d:7e:
33:69:32:1d:85:54:15:6c:a7:97:99:40:3e:ed:5c:
5a:f5:81:33:73:88:c6:47:e3:da:d4:27:fa:26:37:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:82:E7:C0:0A:BD:2F:68:65:83:F4:66:23:D0:6C:1A:FF:B1:D8
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:b8:fa:7d:8f:6d:7b:ee:da:4c:dd:7e:1c:16:d4:65:61:
a2:f6:ff:9a:0b:69:e0:62:53:48:b7:8f:f7:96:a3:22:6f:3a:
10:72:cc:62:4d:d1:b6:8f:ee:a5:6c:d8:92:44:32:a3:88:d5:
07:e1:59:03:72:0b:0f:16:15:4f:e6:68:11:85:98:d7:48:75:
6d:14:3a:27:04:f0:c2:93:af:25:b9:0d:85:ff:d6:74:b7:61:
d6:46:58:c5:30:01:c6:5c:e3:ab:4b:9d:4c:02:f1:cd:9c:29:
2d:66:29:db:92:d2:5d:14:a5:bb:e9:75:2b:3d:d1:c1:83:59:
7c:31:59:f6:25:14:d8:a9:8c:e3:47:c8:fc:68:c7:69:39:59:
3c:9b:01:a2:6c:59:e8:ba:8d:fb:dd:44:09:26:29:e2:9d:fc:
ba:07:e4:79:24:fe:af:ba:29:f9:ad:b0:2b:5d:39:c7:44:dd:
89:98:4a:85:78:3e:4e:b4:3b:3e:e4:af:26:e4:86:ec:b9:ab:
49:48:e7:c6:24:1e:a6:16:d0:78:bc:9a:28:f3:9f:0a:c3:f3:
ce:e6:9d:d7:07:2d:68:ae:f2:3f:d7:64:68:64:d7:10:fc:5f:
4e:a5:3a:18:cd:b2:9c:23:ee:a8:1d:ed:02:72:4e:3a:a1:de:
42:78:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:23:02 2025 by rpki-client