Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: UvGXLamvxFiPr6+5ntJx/isIw1+0nGASenBhhbNDZJw=
Subject key identifier: 49:83:84:DB:8C:D1:8B:33:64:94:26:19:99:C0:A5:9A:A3:1A:32:6E
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 019747795BE2FA12ABB2811448ED847C8655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 23:00:25 +0000
Manifest this update: Fri 06 Jun 2025 23:00:25 +0000
Manifest next update: Sat 07 Jun 2025 23:00:25 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: pYE4jjAkdQvH8GwCtcB3Hiy2cg5jnIyHCBlFNkuh+jw=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:5b:e2:fa:12:ab:b2:81:14:48:ed:84:7c:86:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Jun 6 23:00:25 2025 GMT
Not After : Jun 7 23:00:25 2025 GMT
Subject: CN=498384db8cd18b336494261999c0a59aa31a326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:c8:d6:c0:43:b4:11:44:b5:fe:1c:4f:db:
3d:a6:41:8e:89:74:a9:c2:f9:2a:81:73:ab:eb:6c:
c8:15:4c:3b:33:07:5f:44:2d:1b:5b:fb:cc:b6:b4:
b4:d0:fd:93:b8:81:d5:5f:bf:f1:4a:eb:4e:5f:2b:
14:bd:62:50:ad:85:3e:a3:6d:dc:5d:a9:b9:8d:cf:
95:d3:5e:2d:c6:34:f2:66:5a:70:86:48:5c:70:94:
1f:4e:09:a7:74:55:57:8f:8a:af:e2:ec:8a:4d:6a:
d1:ea:21:3f:11:5f:74:2f:84:20:3a:98:fa:c9:f4:
66:ea:57:31:db:c4:a1:07:74:75:b5:29:b9:dd:99:
00:a5:30:62:04:98:4e:ed:93:4b:f4:6d:9b:bd:14:
2c:6f:ae:f2:84:30:83:ed:a6:c6:0b:e6:35:cc:94:
31:d7:28:8a:de:c5:b4:a7:dc:3f:cf:25:45:15:02:
08:da:42:17:7c:bd:b7:2c:dc:c0:34:cd:a7:73:c2:
03:15:a3:cc:25:58:0e:48:df:84:9b:31:79:b1:ac:
13:d2:3d:fb:7f:0e:74:ee:ab:ee:1e:30:3c:9c:a2:
d8:34:1b:58:e4:f6:91:af:ce:ca:e9:6b:43:5b:1b:
66:87:89:bb:7d:e5:46:ca:b6:49:1f:05:82:08:72:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:84:DB:8C:D1:8B:33:64:94:26:19:99:C0:A5:9A:A3:1A:32:6E
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4c:f6:cf:6f:d1:d7:24:a6:23:fa:d1:60:a3:5a:84:59:1d:
3f:25:af:d2:37:87:26:82:2c:97:5e:ea:0e:20:9a:f7:ce:ae:
21:f6:4f:3a:ac:38:32:a3:2f:db:01:ef:3d:36:fb:f8:7d:4f:
d7:34:71:57:93:34:95:e6:59:d3:6b:66:9e:42:89:c7:42:d2:
cd:1c:c8:a1:e3:25:24:05:05:c9:25:a6:b9:d7:9a:f2:30:9c:
fe:bf:e9:c2:d9:3d:57:27:f3:05:cf:07:e4:40:37:ff:ce:7c:
07:25:53:88:44:c1:83:b6:fc:dc:e8:59:0e:91:b6:d7:9a:3b:
ba:d5:91:03:9d:6a:13:c2:43:76:81:35:3f:de:ed:e1:90:74:
61:ad:76:e1:78:ec:76:18:66:69:75:00:68:73:90:cf:f1:f2:
0e:68:f0:53:35:f4:f0:7e:52:bb:97:08:da:04:a2:60:63:60:
ae:cc:3a:96:25:e6:85:2b:8d:a8:e3:88:d0:20:68:d3:27:ba:
05:ba:63:1d:e6:21:16:45:c0:ef:b8:4a:ed:80:93:48:9d:16:
88:83:fe:af:e4:c0:2b:4c:f3:46:8b:43:7c:b9:14:a2:38:53:
f0:ea:51:26:26:5a:c4:5e:0a:67:ea:f8:07:91:dd:7c:b8:ef:
3d:d1:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:21:02 2025 by rpki-client