Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: Tl3/KWiATlpIWerA6bLIcMvFmjND2QyXZR/YBVvjzwo=
Subject key identifier: 2C:86:E8:B2:02:B3:2F:DC:91:B7:CA:74:61:B9:93:34:4F:17:70:90
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 01974CD7651975EEE4EF45EC7178C1E48DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 00:01:13 +0000
Manifest this update: Sun 08 Jun 2025 00:01:13 +0000
Manifest next update: Mon 09 Jun 2025 00:01:13 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: iwseasW+TRA8zujZzcfiuytUrUfdLK7MAPmA61JNFRw=)
2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:65:19:75:ee:e4:ef:45:ec:71:78:c1:e4:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Jun 8 00:01:13 2025 GMT
Not After : Jun 9 00:01:13 2025 GMT
Subject: CN=2c86e8b202b32fdc91b7ca7461b993344f177090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:f5:e9:75:73:60:69:be:0f:4c:f5:c5:ca:
b3:e4:2a:62:b6:7d:df:8d:88:04:49:cf:98:dd:45:
40:f5:6b:b9:ee:72:74:bf:a2:e0:0b:d6:cb:fe:f7:
f6:1d:97:b9:bd:27:57:3e:0c:02:32:96:5b:de:21:
93:36:25:8f:12:e7:fe:a1:0b:8c:7d:42:7e:69:31:
fb:ff:1b:71:1b:13:58:90:d2:e0:29:93:f2:86:1a:
3a:49:07:b3:4b:fe:4d:14:3a:9e:66:9d:4d:0d:81:
b6:46:0d:ef:8a:72:37:f1:36:04:54:0b:72:54:2e:
af:83:26:08:f2:b6:ae:e7:37:51:69:73:61:96:0b:
3c:b7:26:1b:4d:c7:d5:f6:4d:c7:b1:66:42:d5:2d:
4d:24:db:ce:d8:8c:21:e1:f3:49:77:49:2b:95:fa:
73:0f:ff:e8:08:c1:75:82:6f:2c:83:f0:a0:9e:7c:
fc:da:56:3e:aa:a9:fd:32:4d:da:eb:1b:c8:ed:ca:
13:2f:fb:24:64:e7:bb:d8:88:28:5d:c7:fc:b7:fb:
43:d1:56:14:43:78:df:24:3f:bb:fc:d8:d1:22:75:
9a:ee:69:be:ca:3b:67:99:f5:ae:1b:f0:68:a5:45:
46:e8:a6:f0:26:79:a7:42:be:0f:3e:3f:4c:90:fe:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:E8:B2:02:B3:2F:DC:91:B7:CA:74:61:B9:93:34:4F:17:70:90
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:38:62:40:ab:34:21:e5:d7:24:41:2f:d2:27:dc:11:ba:f2:
64:45:1c:d2:ec:4b:27:ae:a9:39:10:f8:78:78:89:a9:b7:c4:
59:26:b6:89:03:4f:76:ce:4f:c3:b6:cc:ef:60:34:16:dc:20:
59:87:60:3c:0b:dd:a8:a1:a6:52:1a:31:18:a0:e9:ea:dc:7e:
d1:21:90:74:1a:15:ba:b4:13:c8:74:35:d7:7a:55:eb:cd:0f:
6f:8c:2c:79:e2:c5:e6:d7:ae:91:4c:26:ae:c2:e3:a8:c9:a3:
50:85:f1:84:01:10:3f:75:8b:2b:66:81:b6:d8:2d:f8:3e:5c:
e2:fe:ab:ea:43:45:3a:64:62:93:16:4f:a0:7c:54:a0:a9:9e:
25:08:5a:8d:6f:3e:a8:99:a4:8e:45:52:f7:88:88:fb:54:e1:
ee:bc:1e:66:4b:8a:ea:59:58:e7:79:63:98:96:5c:ca:ad:98:
61:e3:0b:91:b6:28:0a:4c:89:af:b3:1b:3b:69:19:9e:1b:09:
f1:c1:d8:19:33:d7:1f:f9:bc:00:8a:ca:9f:ee:4a:b9:02:a2:
93:8e:b7:58:cf:ba:e6:e7:f4:01:bf:d6:e3:66:60:4d:5e:8b:
67:78:59:61:b0:f6:77:89:b1:0c:4d:3e:a4:fa:0e:cc:96:64:
1a:2a:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:01 2025 by rpki-client