Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: aS3PjXNtprY86QRl7Amr4VGJsL4NwuKUVOfGQ5m1MQA=
Subject key identifier: C9:BD:D7:3B:77:B0:19:B1:17:80:70:EA:5A:68:E0:26:4A:3D:87:C4
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 01974AB17DFB1CDD0CB1C5A2F421AB09C6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: D6
Signing time: Sat 07 Jun 2025 14:00:35 +0000
Manifest this update: Sat 07 Jun 2025 14:00:35 +0000
Manifest next update: Sun 08 Jun 2025 14:00:35 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: GzlgXOKYxOJiXtZmEa/TA10vFT/6A5rfMICHiQdCA+4=)
2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:7d:fb:1c:dd:0c:b1:c5:a2:f4:21:ab:09:c6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Jun 7 14:00:35 2025 GMT
Not After : Jun 8 14:00:35 2025 GMT
Subject: CN=c9bdd73b77b019b1178070ea5a68e0264a3d87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:9d:7a:a7:61:2f:2a:ef:e4:c0:80:02:8b:
a7:10:b5:6f:bb:16:dd:4d:2e:4c:38:f0:be:19:73:
0f:cf:51:e7:88:cc:6c:f5:1b:7d:56:2b:d2:b1:08:
bd:91:98:6c:5a:8b:97:ba:33:b7:24:c0:8d:cf:c3:
e0:02:40:2e:9a:be:b7:63:8c:2f:b1:4b:e0:73:f9:
c3:36:cb:56:16:37:48:82:10:8e:29:52:f4:78:89:
f0:05:b9:c7:a6:e9:a3:73:ee:df:69:73:24:5d:6b:
07:f0:25:33:a4:65:78:09:7a:9b:7b:c9:06:a8:8d:
25:33:37:6f:f8:7c:31:e4:6b:8e:b3:48:d2:34:92:
f6:de:b7:0a:74:fa:81:8b:d8:fe:d7:7f:7e:c3:2f:
8e:ee:d1:fa:4a:19:8f:27:1b:67:cd:77:40:77:f1:
a0:57:f5:cb:ca:a2:16:08:22:43:03:04:42:02:ae:
c4:1b:9d:40:a9:c3:11:86:ec:86:b2:a0:9d:4c:18:
29:32:ab:b3:83:b4:c6:1f:43:59:fc:9e:fc:03:3c:
8c:66:58:05:0e:19:ea:0f:56:04:12:dd:0b:3c:dc:
18:65:1a:df:9f:85:f8:26:45:52:da:15:64:1d:88:
3d:29:63:a7:8e:9f:7e:78:ef:fb:72:cf:ae:1b:0e:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:D7:3B:77:B0:19:B1:17:80:70:EA:5A:68:E0:26:4A:3D:87:C4
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:a9:5b:ca:e9:ec:ac:fb:29:22:66:00:6f:2d:22:f5:d5:
5d:29:8f:cb:61:7e:e9:5b:ab:c1:50:9b:2e:34:ff:1e:1c:98:
9b:58:e9:b7:36:9c:08:a7:10:c0:39:35:df:80:c0:0d:84:73:
c6:96:a0:26:c5:51:2e:10:da:41:08:db:96:7b:7b:78:8d:54:
d5:7a:50:e9:bc:e9:c5:bc:25:b9:c0:18:74:e0:4f:a8:10:d4:
fe:ce:24:31:af:ad:3c:a0:f1:f3:13:cb:47:e8:60:0b:23:df:
a9:75:7f:0b:d6:3f:70:48:0c:61:21:e0:b4:d2:f3:30:27:08:
d8:6f:52:c8:8b:7b:09:dc:5c:b9:5a:67:25:77:86:aa:45:ae:
5a:62:bc:12:f9:76:ff:5e:23:39:47:49:1f:32:88:40:fc:ed:
e1:08:92:d8:1b:2c:b8:e5:97:d0:a9:2f:52:2a:a7:0d:b4:b5:
42:7e:e0:28:ca:12:f4:83:c6:da:84:9a:6c:a8:97:e2:16:43:
ef:04:01:5b:e7:23:a0:37:27:cc:7f:9c:4b:65:d8:b0:0a:09:
c7:49:d2:30:30:f1:56:0d:a1:14:92:c0:06:03:72:70:4e:0c:
71:37:03:45:1e:ec:83:b9:96:b1:be:ea:04:bb:96:0f:47:22:
69:bf:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:57 2025 by rpki-client