Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: tFKO0jDGYnkIdi0hFhWCtyykBKjhAKKyJKPEbAh4ob0=
Subject key identifier: C9:80:08:D5:EF:95:41:2D:B7:F3:93:AD:4E:FA:91:DE:D0:50:2E:1B
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 0197462FDC203AE0F5B1FE8E8AC254D5CCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 17:00:30 +0000
Manifest this update: Fri 06 Jun 2025 17:00:30 +0000
Manifest next update: Sat 07 Jun 2025 17:00:30 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: 8dCJ9xdxUPSaRx0XXzDw7VOBK49AnFFKn3MQwM8EJuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:dc:20:3a:e0:f5:b1:fe:8e:8a:c2:54:d5:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jun 6 17:00:30 2025 GMT
Not After : Jun 7 17:00:30 2025 GMT
Subject: CN=c98008d5ef95412db7f393ad4efa91ded0502e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:90:76:37:64:bc:53:49:54:ce:c3:6a:0f:
55:7c:49:1d:24:0e:88:c4:ff:9e:d2:fc:b9:1e:ed:
4f:f0:83:c0:e0:48:c7:bc:38:47:f2:6f:bb:27:a9:
7c:0e:ce:86:9a:c3:ca:e1:13:63:d8:32:e6:50:38:
1a:f0:15:24:0e:e9:cb:aa:42:d8:c6:fa:30:54:8e:
ef:bb:02:b2:42:2b:08:99:6b:a3:29:64:38:9d:f2:
df:59:b9:82:38:67:36:cc:17:58:b6:43:e2:57:a5:
57:42:78:bc:a0:a7:c3:cf:56:89:c3:8d:0c:10:36:
33:da:30:f1:95:39:3d:87:92:ef:4a:95:45:71:b9:
2d:87:43:cc:be:02:67:8e:27:86:9e:46:a5:fb:d3:
bf:ab:1d:58:49:39:f1:bb:7e:f7:ca:60:81:df:2f:
41:b5:11:77:cf:ce:67:8d:fa:6e:b2:92:cc:a5:32:
5c:18:b8:ea:e1:ff:aa:85:ca:1a:f2:0d:c1:f4:1b:
74:db:7e:c0:6a:3b:7c:fd:55:8d:d4:48:6f:ab:5b:
6f:0b:07:a2:8d:fd:70:6c:29:cf:d1:d2:22:c9:ed:
da:32:ba:a6:d5:91:97:19:4e:6d:eb:ed:6e:34:93:
ec:62:80:ef:b4:7e:08:d9:a3:00:26:fd:9a:27:74:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:08:D5:EF:95:41:2D:B7:F3:93:AD:4E:FA:91:DE:D0:50:2E:1B
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:5f:9e:e5:36:09:0a:32:f9:81:25:69:c4:5c:5d:5e:99:
7d:d3:3c:42:3e:52:80:6a:32:ee:8f:07:0b:f3:c2:43:b8:9e:
94:b0:b3:2a:86:e5:75:f7:9c:78:d1:57:12:fb:7e:7a:89:15:
5e:03:aa:e3:c5:08:1e:01:cd:cf:e9:ca:c8:61:1c:f7:e3:04:
f1:08:79:e4:f6:ff:45:64:ea:5d:48:3b:f3:f2:6b:d6:78:e6:
31:92:49:ed:d1:54:1b:5a:34:ea:e1:87:40:23:3d:83:b5:c3:
f9:94:34:73:62:23:41:3c:6a:99:da:2d:a8:29:11:96:85:24:
c7:e0:1a:4e:e5:db:90:bb:72:d0:70:87:99:d9:b6:bb:1b:3e:
f4:69:79:ab:3e:0d:20:d8:2e:12:18:85:8e:10:7a:88:fb:3c:
52:09:cb:09:2a:ab:59:78:1a:39:9c:13:ad:ce:0c:5e:db:f1:
90:ef:0b:fd:4a:62:64:99:0f:7b:d8:8e:1d:2e:ba:d9:11:fe:
0d:f9:c3:f7:28:f4:1b:33:32:4f:6c:ec:dc:d4:90:01:a0:55:
ac:f1:f2:c8:30:47:4f:9f:95:6b:41:10:a6:72:0d:19:1d:55:
77:4d:46:b3:bb:1a:2a:5d:7d:03:ea:d2:91:78:b0:13:3b:5c:
4e:26:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:12 2025 by rpki-client