Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: /x2aE8VGRSwktg0j7RxW5K21IZe7ZfFMZL8V+zs1hag=
Subject key identifier: 02:C5:27:11:84:AB:BF:7C:26:93:2C:A2:B6:6D:0A:53:73:79:05:67
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 01974967EAEB62E487DF70CF7F0374DD7C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:00:36 +0000
Manifest this update: Sat 07 Jun 2025 08:00:36 +0000
Manifest next update: Sun 08 Jun 2025 08:00:36 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 3nRNuGTERAF5msJAGrwXhVNNocnk7DmC9LX1+eql3Ys=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:ea:eb:62:e4:87:df:70:cf:7f:03:74:dd:7c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Jun 7 08:00:36 2025 GMT
Not After : Jun 8 08:00:36 2025 GMT
Subject: CN=02c5271184abbf7c26932ca2b66d0a5373790567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:27:5e:73:af:99:a4:02:ae:f5:6f:4f:58:
e8:b2:1f:54:8b:7d:b7:df:38:af:8a:87:ed:a8:79:
83:b2:c9:97:d3:4a:6d:6c:ad:dc:31:93:46:5a:df:
df:8e:4f:58:c9:cf:5e:50:1a:45:b9:18:cc:7c:16:
13:72:fd:c4:34:e5:47:6c:3c:8a:7a:74:ba:a9:d9:
e6:bc:33:30:c2:59:3b:d9:ee:dd:96:10:b2:d1:c8:
8c:b8:dc:d8:1e:52:7d:75:34:68:91:ba:26:db:35:
6f:ae:4a:17:16:bc:4f:1e:eb:c8:b4:fd:06:59:c9:
97:b6:20:4a:42:63:1a:26:11:59:18:bd:7a:4b:0f:
39:35:d7:26:bc:cc:93:73:21:e7:ef:74:08:c5:b1:
44:9e:a5:b1:6c:c8:6e:6f:59:7f:ca:10:63:71:27:
43:fc:96:f7:b6:1c:e9:ba:4b:04:49:8d:9c:97:51:
28:4d:e2:b2:23:8c:28:5b:eb:3d:3f:15:fa:b0:2c:
88:a7:8a:66:f8:1a:ad:86:52:ba:14:7e:53:cc:a6:
f3:e9:f1:48:f6:01:7a:95:f9:e5:c3:ee:c0:1e:44:
0a:3d:d9:6d:f4:bc:7f:24:bd:e5:4f:c5:c4:e1:b3:
c0:17:94:30:7d:30:59:ce:28:0c:24:04:b3:9d:d8:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:27:11:84:AB:BF:7C:26:93:2C:A2:B6:6D:0A:53:73:79:05:67
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4d:3f:60:83:9f:3f:93:1a:24:ba:72:26:b7:10:78:b5:df:
c9:4d:24:3a:ca:45:06:c6:58:43:eb:4b:13:4a:f4:11:ea:2c:
bb:6d:bd:9f:0c:94:e2:cc:28:3a:d7:dd:29:33:ea:cc:74:67:
47:1f:70:11:cd:69:d4:00:83:d8:65:72:19:f5:88:73:51:1c:
54:b9:58:3c:07:29:b3:c9:d4:94:99:98:4b:42:95:54:bb:21:
14:c6:bd:a1:f9:72:6e:c3:0d:3d:9c:a5:26:c9:b5:b2:2f:2f:
e8:5b:ea:04:d4:5e:4d:c7:68:49:b1:87:a1:8f:37:a3:57:d6:
c3:95:9c:39:a4:63:42:95:c7:ef:a7:63:cc:f9:c3:0d:ea:ad:
4e:b9:bc:3a:c9:9c:2f:6e:36:47:3a:b8:90:ff:32:7e:64:23:
c8:a6:97:42:49:d0:3c:d9:38:d8:9b:3e:32:4c:72:ab:da:fc:
e1:33:c4:06:dc:49:ce:51:90:a4:90:93:c0:3e:58:8b:2e:a2:
5f:e0:1e:bd:ed:c7:4d:e2:98:6c:40:44:fb:7c:bd:16:52:c4:
63:bc:7e:cb:47:09:73:a1:26:d0:4a:d4:a8:3b:55:30:e2:2f:
09:e4:53:95:0a:b7:13:3b:86:92:44:4f:f6:43:a0:31:7d:a3:
2b:1b:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:00 2025 by rpki-client