Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: 0ER2r3BUpBwIZ6zBl7c8RvaTApcFuMU1JHhDDLKk8dQ=
Subject key identifier: 35:2B:25:32:DF:79:45:36:4C:8A:66:BC:30:A1:D0:C7:F5:52:2E:EA
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 01974EFC02158A7C1A0B328C40581221107B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0212
Signing time: Sun 08 Jun 2025 10:00:27 +0000
Manifest this update: Sun 08 Jun 2025 10:00:27 +0000
Manifest next update: Mon 09 Jun 2025 10:00:27 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: 9yk0YC6kTbELtsk2YT91gsfZmf9zEOgto6p/MWd9JGg=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:02:15:8a:7c:1a:0b:32:8c:40:58:12:21:10:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Jun 8 10:00:27 2025 GMT
Not After : Jun 9 10:00:27 2025 GMT
Subject: CN=352b2532df7945364c8a66bc30a1d0c7f5522eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:57:a8:aa:4b:0e:d4:14:ec:1d:fa:dd:0f:
b4:79:74:25:37:4b:b4:31:95:23:8b:96:63:e5:95:
d7:b6:7a:d0:2c:2d:98:04:eb:f0:49:df:9a:cb:41:
8d:0c:3b:5b:0d:6a:19:2c:20:bc:59:ed:37:f4:10:
4b:ba:3c:07:f6:12:21:04:79:86:6a:a3:78:b3:1d:
00:cd:47:ea:cf:f5:d4:4f:53:8e:34:98:71:e6:7c:
e4:30:ef:cf:42:a9:4d:7a:c6:1d:d7:ec:48:53:50:
c7:e1:bb:59:14:96:7b:58:9a:b4:10:c6:b9:20:1d:
97:36:64:74:01:17:45:8f:bf:85:ef:18:6b:dc:1e:
5d:02:4b:5a:05:4f:6a:e8:b3:7b:2a:eb:76:d2:76:
8e:17:ef:c3:4f:1f:30:47:31:96:c8:d4:5f:07:ff:
d7:5e:8a:20:23:d9:6d:06:96:70:95:fc:09:e2:31:
e4:c2:ca:c0:2c:d3:0a:89:56:82:37:93:f7:9c:3b:
91:4d:bd:cb:01:35:15:6e:0f:56:46:f7:fa:41:ff:
6e:26:57:52:a3:42:db:6e:be:a1:64:2f:d7:f5:f8:
71:28:9c:a7:2c:e7:fa:a5:01:90:0f:7d:a7:56:11:
c3:8c:b2:eb:71:59:d4:4e:34:e1:e3:fa:74:03:8b:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:25:32:DF:79:45:36:4C:8A:66:BC:30:A1:D0:C7:F5:52:2E:EA
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:aa:ff:a1:79:bb:86:3f:a3:de:6a:e1:7e:92:9c:fe:0e:
8c:35:c3:bd:e4:02:0c:ff:66:e1:ea:da:d4:b0:6e:24:75:52:
cc:b7:a1:8e:70:91:96:60:e8:3e:c3:67:57:fc:03:f1:96:73:
50:db:ce:78:91:3d:70:17:57:93:d3:96:93:69:a3:9d:03:3e:
cf:1c:a4:ae:29:98:04:71:34:5d:4d:a3:aa:78:87:dc:bc:1d:
03:06:9b:e5:5f:b9:02:89:14:e0:52:e4:7d:5f:bc:fa:10:91:
29:c8:c5:7a:c8:a4:7a:c4:ef:50:7f:db:67:38:35:cc:44:e2:
12:e9:54:8f:de:b5:57:63:af:c6:9a:f8:b6:0a:32:70:9f:72:
16:e9:5a:2e:83:9b:2f:86:dd:90:0f:bc:62:1c:91:ee:36:cd:
2f:90:06:3e:b6:97:e2:2a:db:0a:48:a3:ba:ac:2b:a4:60:f7:
cb:71:5c:0e:72:95:d9:6d:e9:34:e8:8d:9f:f5:86:a6:8b:55:
7d:0e:a1:cb:b5:5f:b4:40:29:22:a9:b3:ac:75:75:fd:9e:62:
8e:83:02:dc:9e:57:82:52:32:9a:7e:c8:e3:82:2c:69:d6:9d:
2c:3a:55:76:a4:c7:f4:56:2f:f7:57:e7:e3:d8:f9:5b:e7:d3:
9b:c4:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:10 2025 by rpki-client