Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: oNHir1uZOlFwk4l7WsNZY+rQml3cJBRf9Oy41kIiuKA=
Subject key identifier: 2B:9F:B5:CB:AE:AD:81:4F:97:66:DC:28:6D:6A:9B:3F:4D:4F:DC:00
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019749684BE8D88D1CA916A1288A35D9CF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 04D9
Signing time: Sat 07 Jun 2025 08:01:01 +0000
Manifest this update: Sat 07 Jun 2025 08:01:01 +0000
Manifest next update: Sun 08 Jun 2025 08:01:01 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: dijVgGHRJLHCdOwYOwIab/rRr9/xRKGxFHSTe5jXM8U=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4b:e8:d8:8d:1c:a9:16:a1:28:8a:35:d9:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Jun 7 08:01:01 2025 GMT
Not After : Jun 8 08:01:01 2025 GMT
Subject: CN=2b9fb5cbaead814f9766dc286d6a9b3f4d4fdc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:42:19:8d:57:74:cc:c9:e3:3d:1e:c7:9f:
29:74:91:c5:3c:05:4e:33:7a:20:1f:62:61:da:5e:
44:85:6d:fb:bb:0a:e8:ac:52:cc:c3:1b:90:13:62:
b3:82:5a:86:4b:3e:38:92:88:c2:68:c6:47:0d:5f:
d4:d4:8b:a1:82:fc:0b:0b:95:7e:53:8e:a5:11:76:
f1:09:fa:f0:50:e4:7c:e0:07:29:82:16:20:e6:79:
e6:f3:bd:6d:d6:87:82:58:0d:f0:07:39:54:eb:ec:
d6:b1:56:bc:23:fd:50:b4:ef:90:ed:dc:a7:f1:d0:
09:e1:4d:f1:78:cb:ad:4e:1d:18:06:74:0f:0f:cc:
5d:68:f8:ee:a9:16:e7:41:8c:80:cb:ea:18:3e:2d:
75:e5:22:fb:f5:43:4d:b3:49:cd:95:06:b4:9f:d6:
bd:ae:0c:65:72:78:34:72:f2:bc:de:0b:92:10:b6:
ab:71:ff:8d:d8:8a:3e:ba:39:04:82:f5:1c:bf:58:
94:3d:2d:66:82:2e:4c:e5:15:73:3d:cd:8d:d6:0d:
43:ad:0f:d1:24:32:6e:9c:7f:1d:a8:9b:bc:ac:25:
5b:81:f6:28:97:3d:04:11:cf:fc:1a:19:58:c0:d2:
63:cf:d4:59:7b:ef:9d:66:e1:a7:ce:04:aa:44:16:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:B5:CB:AE:AD:81:4F:97:66:DC:28:6D:6A:9B:3F:4D:4F:DC:00
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:27:bc:eb:03:e1:72:43:e5:d1:96:9a:fa:1f:b9:68:7d:
6f:87:a9:30:81:52:e5:70:6c:b7:53:f3:de:cd:28:66:32:b9:
2d:84:d6:f9:06:1c:2c:cf:45:b2:d4:93:02:da:d0:77:c7:60:
31:7a:06:9d:b7:0c:41:d4:53:5d:85:8b:74:0f:df:c6:93:a9:
23:7f:c2:32:04:f3:61:ee:74:50:50:69:de:e4:4f:da:1d:0b:
62:56:59:7e:1e:a4:61:27:2b:ab:5a:d4:c2:b0:dd:66:83:00:
00:7f:ba:2b:2b:1b:8c:d4:9b:bd:db:7e:85:77:66:e3:cc:e7:
4a:41:0d:b2:e9:ea:51:5a:f4:33:13:58:eb:5c:f3:f5:26:f7:
90:c3:e2:78:4e:f6:d4:a4:d5:95:7d:0c:e6:c7:2b:7b:b0:d5:
ae:56:9d:64:9a:89:f1:0a:db:95:08:c5:17:f4:15:da:43:07:
9f:22:36:4d:aa:8c:2d:94:72:6b:d5:26:2b:b5:bb:50:32:90:
95:3e:87:ee:fc:e9:ae:be:00:69:42:ac:15:3b:cc:c8:46:bf:
ee:12:3f:d9:b2:71:04:6a:b8:09:77:fc:b9:48:75:34:b4:44:
11:be:ae:c7:27:44:43:97:3a:ef:c6:ce:a5:42:4c:cd:0d:8d:
6f:fc:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:55 2025 by rpki-client