Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: dGCfUPcpnewqK/TekqiqLR8n+zpr9ySyvHyKNwihhN0=
Subject key identifier: 35:61:30:7D:77:3E:74:7F:CC:C5:BE:C6:5C:BB:29:3A:C2:10:0F:17
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0197485578FA727E01A56D705BAD93B1897E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1381
Signing time: Sat 07 Jun 2025 03:00:50 +0000
Manifest this update: Sat 07 Jun 2025 03:00:50 +0000
Manifest next update: Sun 08 Jun 2025 03:00:50 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: HtavswKOrmCej3y0vf7yIjW0o2EPY1Fern5ugNFz6UU=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:78:fa:72:7e:01:a5:6d:70:5b:ad:93:b1:89:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jun 7 03:00:50 2025 GMT
Not After : Jun 8 03:00:50 2025 GMT
Subject: CN=3561307d773e747fccc5bec65cbb293ac2100f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:02:3e:b5:a3:e2:47:73:ad:91:ec:40:71:
49:b0:59:74:ef:40:18:96:a8:9f:2a:78:07:d4:99:
ca:3c:27:34:31:92:eb:4a:be:de:97:5e:3d:0d:d8:
de:51:83:5d:95:e9:a1:33:cd:ae:38:48:8e:e5:58:
60:08:f9:d1:66:95:6b:79:9a:20:0a:4e:62:72:c2:
14:08:3b:f2:ba:64:ff:78:5f:a0:45:fb:04:10:b8:
72:a2:0a:71:76:8f:44:10:df:92:5f:c4:29:5a:b0:
94:3e:38:75:e1:39:65:59:75:4d:2a:ce:e1:56:20:
31:07:2a:fd:c6:5f:52:a6:f9:1b:28:43:94:89:c1:
be:f7:84:bf:af:a7:04:63:f5:8a:b8:b0:35:a0:86:
cd:6a:5a:68:42:bf:1b:2d:7e:e3:09:5a:8a:62:0f:
5e:5b:9e:3b:41:d5:9a:7f:10:89:c4:d9:8c:13:14:
0d:cc:da:ec:27:db:8f:a5:e0:73:7c:4f:8f:ab:74:
8f:da:d2:22:f6:a2:0d:b7:39:78:8b:c1:c9:32:7f:
f3:69:27:d7:c3:b6:65:8e:3d:05:a5:91:47:cd:e6:
60:41:db:df:8c:e8:27:57:7d:d9:2a:4e:68:b5:b4:
86:84:f7:26:8a:ef:2a:45:67:77:00:71:63:56:97:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:30:7D:77:3E:74:7F:CC:C5:BE:C6:5C:BB:29:3A:C2:10:0F:17
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:dd:11:68:4f:1a:a0:ad:df:09:d7:54:44:78:c0:36:c9:
77:d9:bb:8c:af:15:5e:fe:f4:e0:47:14:6e:87:f9:30:96:0e:
c5:2a:9c:b0:fb:c3:6b:47:a9:e2:9b:d5:ca:70:29:a4:ae:df:
5c:d7:07:52:59:2c:0a:63:92:58:a7:42:75:36:58:96:60:be:
79:b1:c0:2f:e3:97:dc:98:bd:95:df:93:20:1e:46:40:7f:79:
3f:be:cf:71:fb:d9:a5:8e:ee:7d:9c:d9:06:a3:6a:04:2f:38:
31:11:da:29:ae:73:5a:a8:50:12:7d:fc:0f:09:5e:56:42:09:
bd:8c:f2:81:21:47:ac:86:2a:8a:bd:c5:cb:e2:1e:f7:55:e9:
c0:52:06:04:e4:26:c9:81:4d:d1:0b:40:60:b4:c4:0f:30:e7:
22:b4:31:36:0d:62:e8:f2:53:41:09:13:ea:fe:cb:f3:a2:c6:
b1:2a:ef:34:a1:7c:7c:a2:f7:0b:19:8e:a4:6f:a1:e3:c4:32:
40:b1:36:28:5c:6d:f1:37:be:c6:3f:28:b2:4a:be:82:c0:c6:
f0:2a:6b:02:93:ee:10:5b:8c:9c:b3:5f:67:30:bd:0e:fe:05:
1a:a9:07:42:96:99:f7:8c:c4:88:e8:9a:46:46:3f:ee:ba:a9:
d8:6d:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:35 2025 by rpki-client