Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: K+tAxjg9uByGIT1gNxrLK76aNbe4NBXdWx6eeuqeq3E=
Subject key identifier: A7:72:A0:6D:A0:46:85:B4:BE:3F:FE:F1:BE:A8:D4:BD:B1:E2:C8:95
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 01974B566494C821E0F04DD31062F352E982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0DE3
Signing time: Sat 07 Jun 2025 17:00:42 +0000
Manifest this update: Sat 07 Jun 2025 17:00:42 +0000
Manifest next update: Sun 08 Jun 2025 17:00:42 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: S7VJNATJvJpQUMskUwedMSoyS4RxlT9DdPmpRGN7z9w=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:64:94:c8:21:e0:f0:4d:d3:10:62:f3:52:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Jun 7 17:00:42 2025 GMT
Not After : Jun 8 17:00:42 2025 GMT
Subject: CN=a772a06da04685b4be3ffef1bea8d4bdb1e2c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:97:14:76:3c:a8:e0:fe:0a:1c:6a:d0:4c:98:
b0:8d:9e:b4:07:a2:c7:5f:31:3f:eb:15:a4:58:92:
c7:14:32:2e:3d:41:64:8b:4d:57:ce:31:42:45:71:
92:80:bb:09:7b:4e:74:c4:df:2e:40:5b:9e:16:84:
e3:e2:fd:50:36:d5:d8:24:33:07:17:27:92:d7:f5:
a9:d2:20:d2:58:a0:1b:67:a6:88:b4:5c:ae:b0:9c:
1c:63:a7:25:f6:3b:c0:fb:50:b8:ec:32:64:18:da:
0b:4e:a8:ac:eb:2c:95:86:90:db:7e:4a:ff:c7:0f:
f9:21:db:4e:54:5e:36:7e:11:c6:ef:de:6a:c5:c2:
08:69:65:d2:26:d1:59:4f:1f:a9:52:ad:52:49:71:
b7:6d:60:4c:6f:99:9f:17:68:b2:8b:93:46:b5:81:
bc:8b:38:65:a2:cc:42:8b:ee:e4:ad:e4:98:28:ec:
15:96:a4:2c:72:29:b3:52:36:40:fc:9d:4f:f4:56:
6c:66:46:60:e4:c2:78:61:b6:0b:dc:26:4e:2d:cb:
10:28:26:62:a5:b4:8f:63:36:24:14:a6:fc:64:b9:
b9:95:e0:ae:1d:96:19:43:b6:7b:a6:6b:ba:af:ed:
e9:48:05:07:9d:76:0a:99:d7:9d:ee:58:e8:a5:50:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:A0:6D:A0:46:85:B4:BE:3F:FE:F1:BE:A8:D4:BD:B1:E2:C8:95
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6e:84:3b:0c:25:d3:ab:3a:73:ef:de:20:0e:32:3e:79:ad:
ee:c7:42:cf:92:60:1d:c8:1e:a3:7f:26:aa:ee:3c:fa:9c:9f:
16:6a:c3:11:c9:d4:8f:a9:ab:5e:54:1b:5a:fc:43:3f:3c:94:
36:e2:5b:7f:2a:55:12:07:03:57:c0:b9:c1:f2:3a:e5:16:7b:
86:00:e2:42:ef:57:e7:a3:54:5b:41:00:7d:fc:02:41:92:11:
8d:5a:fa:65:ae:17:6d:6d:de:77:13:4a:e3:2a:fd:74:03:f8:
4b:60:a4:91:b1:f4:30:05:d9:92:27:cd:2c:33:42:9a:76:e6:
a9:61:01:53:3e:f6:34:70:02:1c:18:7f:fa:46:31:a2:b8:75:
d7:55:3b:a2:42:af:72:28:64:2f:f0:b3:7d:e7:48:13:4e:73:
e4:8e:f7:5c:82:87:ac:07:4b:ed:82:ef:14:5d:1a:45:db:1a:
64:4a:c3:ee:dd:49:c8:9e:e1:25:1c:0a:55:c0:19:dc:aa:d2:
36:8d:b3:23:54:4d:5b:b1:b7:26:30:6e:25:a5:80:6c:9c:bb:
e7:69:b9:17:c0:85:ac:18:ac:98:75:1d:db:ce:37:01:dd:d0:
8f:54:45:1c:d5:2b:fc:c5:91:93:d9:fc:e5:78:86:02:ed:e9:
99:65:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:08 2025 by rpki-client