Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: PsO/xK5g98nYzhgN1lFamAUtJJEAA65JtHR4ST64LMM=
Subject key identifier: 7B:C5:D3:8F:9F:0F:A8:BD:29:39:47:C6:5F:6F:14:84:69:7F:CB:71
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 019751FD829A7CFE75849AE833770A1DAFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 1076
Signing time: Mon 09 Jun 2025 00:00:57 +0000
Manifest this update: Mon 09 Jun 2025 00:00:57 +0000
Manifest next update: Tue 10 Jun 2025 00:00:57 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: xfqJ6EK96IXc6VkoUEeiq+rnw8epJjWwGj0p4tZxaGk=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:82:9a:7c:fe:75:84:9a:e8:33:77:0a:1d:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Jun 9 00:00:57 2025 GMT
Not After : Jun 10 00:00:57 2025 GMT
Subject: CN=7bc5d38f9f0fa8bd293947c65f6f1484697fcb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:6a:01:6f:06:1d:fe:8f:01:25:ea:b5:09:
5f:aa:5e:e0:e6:96:6e:4d:c3:99:ce:12:0d:41:c6:
6b:b8:a2:30:c1:b1:6e:3b:a3:b4:d5:29:95:cb:b3:
06:af:06:26:4f:8a:de:d0:2c:4a:47:a8:10:50:f1:
c1:84:ad:0f:df:02:dd:e9:2f:3a:6d:b5:95:d1:4e:
ca:28:54:ee:d5:d3:10:af:cf:19:e3:c7:50:58:20:
02:1a:e4:5d:0b:df:a5:59:fa:64:2a:f6:b2:d0:b5:
84:14:62:c9:66:37:00:db:6e:3f:36:bc:80:e8:39:
53:2a:aa:a9:c2:4b:ac:b4:48:46:49:01:93:8c:35:
b4:fe:7a:19:ff:05:43:cc:6d:84:8b:02:e5:cf:73:
6e:47:9f:b1:6d:a8:15:1c:94:83:08:b8:71:48:be:
70:54:21:1e:6b:fc:5a:a0:3e:a2:ca:13:b1:04:3b:
cb:0f:b0:8d:5c:97:1c:eb:81:84:f2:45:87:ea:db:
be:24:53:6b:98:87:cb:08:d7:01:39:b6:07:5e:8e:
ae:5c:57:fe:1d:38:69:fd:19:c1:47:1c:b4:ce:a6:
83:f8:3a:ea:0b:c4:47:7a:89:d4:35:ba:1a:01:4d:
16:6e:24:2f:db:c7:e8:c2:07:c0:18:51:c7:b2:94:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:D3:8F:9F:0F:A8:BD:29:39:47:C6:5F:6F:14:84:69:7F:CB:71
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ee:9b:f9:be:c0:36:7f:76:a5:5a:01:04:c9:f0:33:97:5a:
b4:76:6e:4f:6d:bc:48:2a:af:be:4f:f1:b0:b6:bd:3a:df:0b:
90:08:b8:38:5a:73:05:e6:27:cf:12:b5:62:58:e3:93:2a:ef:
71:dd:8c:a5:dd:49:15:0a:40:2f:d8:57:9e:66:ac:9a:81:d7:
52:84:f8:17:f2:ff:58:83:4b:3c:2c:5f:c5:fb:28:18:0e:ae:
6a:10:78:89:ba:1d:f3:fc:31:d2:19:25:10:ba:a1:94:a9:65:
c1:3b:93:b4:45:7f:ed:20:78:3d:33:14:a4:c2:88:85:10:ef:
30:7e:02:75:97:cc:28:19:53:95:d9:03:bc:56:e7:00:5e:41:
5f:73:e8:9f:2d:a9:ce:14:94:3c:c5:ad:02:c9:56:cb:1d:d9:
bc:53:ab:83:de:e8:53:8f:4c:c1:8d:e6:25:fe:d2:8c:f7:86:
6c:b3:ae:88:49:74:91:6e:c9:8f:b5:74:49:b7:9d:1a:1d:44:
42:28:27:7c:aa:fd:81:49:8a:8f:6e:c8:e9:ab:97:9a:65:51:
af:ea:fc:17:7a:91:c1:a6:09:1a:b6:8d:8d:c9:92:93:d1:7a:
a6:8f:01:86:00:87:8f:d7:0f:91:5c:50:58:96:4b:cd:cc:cc:
50:3f:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:44:58 2025 by rpki-client