Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: kRnTfZunGmr2295Sbg+hQgXPx/lEV4Q8Zei8goJf+hI=
Subject key identifier: 46:3F:E5:C3:F7:C7:97:D2:45:9A:D3:AE:B0:19:E7:BC:C5:B1:D7:1B
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01974D44A892B256AE2A5DAD04DF50128111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0D53
Signing time: Sun 08 Jun 2025 02:00:34 +0000
Manifest this update: Sun 08 Jun 2025 02:00:34 +0000
Manifest next update: Mon 09 Jun 2025 02:00:34 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: 2uiictXtfHjce27GWKQVdBZ0cfJRjWIQJ5JkGolvHZQ=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:a8:92:b2:56:ae:2a:5d:ad:04:df:50:12:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jun 8 02:00:34 2025 GMT
Not After : Jun 9 02:00:34 2025 GMT
Subject: CN=463fe5c3f7c797d2459ad3aeb019e7bcc5b1d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:c3:79:a2:86:80:5b:60:d9:6e:49:f1:70:
63:a8:f3:2f:bb:11:4f:98:71:db:f4:28:32:79:c4:
a9:2e:8d:24:99:0b:26:df:9d:c2:2e:40:cc:e9:0a:
cb:08:57:33:fb:7c:87:df:be:d3:3f:e2:b0:00:da:
d6:dd:8e:2a:97:80:2e:ba:e9:56:af:e9:12:02:2d:
58:b0:e4:e4:77:3d:a5:3a:85:1f:7e:31:c4:2e:64:
52:80:d2:0d:bc:6d:88:98:0a:63:75:ea:df:01:76:
75:86:2a:90:4b:8b:4c:b4:06:5e:57:db:3a:39:bb:
4b:7e:e9:54:7a:bc:eb:77:ad:08:fc:41:03:e0:be:
dc:68:eb:57:95:f6:d8:e0:f2:57:44:33:38:80:c5:
63:db:86:58:8f:2b:73:e5:52:29:cf:b6:a3:94:8d:
e8:74:1d:32:12:38:54:c9:07:70:3e:5f:7c:e3:c5:
ed:75:d5:d3:77:52:e8:bb:3a:e0:52:af:df:dc:e5:
18:d1:f7:ba:2b:fc:43:d3:36:ea:40:78:eb:0a:ac:
d1:41:f2:2c:db:50:4e:48:98:b0:45:26:e2:25:86:
1b:a9:f4:26:04:ac:20:c3:be:c0:1e:ff:4f:b5:71:
7d:14:47:49:e8:42:31:b1:fe:fe:70:1d:0f:45:49:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:E5:C3:F7:C7:97:D2:45:9A:D3:AE:B0:19:E7:BC:C5:B1:D7:1B
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:d9:9f:53:7e:a7:80:71:a5:f5:a1:60:e1:08:05:99:4e:
22:4b:d3:db:9c:da:53:55:69:d7:dd:e6:bf:1f:38:9f:2c:81:
15:a0:fb:ef:17:79:e1:fd:34:be:11:b4:71:ff:40:ea:56:2f:
96:58:79:53:ea:25:6f:11:86:c0:3e:6f:61:71:fc:33:81:3c:
c5:5a:cb:16:f0:c1:ca:62:9f:7b:50:6f:7e:fb:5a:c8:7f:6f:
5a:96:f8:bc:bb:ef:4d:9d:aa:17:0a:2a:92:b5:05:83:d4:ee:
61:40:20:43:50:ba:db:42:1e:87:fa:85:ff:44:db:da:24:39:
a6:92:ae:75:36:ee:1f:d1:3d:13:09:b5:da:0a:ad:b0:37:b8:
a9:47:25:22:4f:c7:68:c5:8e:81:e9:8b:11:17:e0:c3:b5:34:
06:40:0c:aa:d7:79:c4:36:40:b6:38:80:42:e4:c9:32:5b:3a:
2d:72:c2:fb:25:e8:61:84:86:7b:f3:f7:73:60:24:f3:fd:66:
a0:cb:a3:25:c4:48:35:a9:64:ae:c0:4a:f5:4a:4b:80:90:39:
df:e6:b5:b4:58:4c:87:19:37:67:2a:ed:12:42:ed:ff:07:6e:
b9:33:77:ac:da:ef:8d:dc:ee:e7:f0:14:c3:8c:25:47:16:74:
bb:cf:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:19 2025 by rpki-client