Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: YBLVNdFvso8R8wR+8iz4u8fWhpG1nxBD++NgUL6sBFw=
Subject key identifier: CD:7A:9D:B3:84:96:94:E6:CC:FD:80:63:09:6A:F5:A4:0D:7F:1A:AE
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 01974E57102B5707824D60135E6277ACBFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0903
Signing time: Sun 08 Jun 2025 07:00:17 +0000
Manifest this update: Sun 08 Jun 2025 07:00:17 +0000
Manifest next update: Mon 09 Jun 2025 07:00:17 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: KsjB7WgXFat7OeDDCRagGznyYg/A6AjhB9NPmyqNB8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:10:2b:57:07:82:4d:60:13:5e:62:77:ac:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Jun 8 07:00:17 2025 GMT
Not After : Jun 9 07:00:17 2025 GMT
Subject: CN=cd7a9db3849694e6ccfd8063096af5a40d7f1aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:31:1d:39:ad:44:6e:10:ec:83:9f:17:40:
33:7f:fe:5e:2d:f8:5b:b7:ec:9e:3d:ab:bd:e9:32:
01:a7:ba:b6:7e:a2:35:9a:d6:cc:37:e7:1e:74:27:
46:91:9c:42:89:55:20:30:cc:14:08:60:3b:87:a8:
cf:44:bb:73:09:b3:6e:f8:6d:47:ad:00:bd:52:c7:
17:93:d3:64:c1:ab:16:0e:2a:dd:bb:15:9f:12:47:
3d:07:99:1b:66:c5:f8:e6:c7:cb:ee:f0:c5:cb:ea:
d2:e6:3c:b5:45:c0:fc:8e:47:86:57:bf:f2:38:26:
70:d0:01:4d:0e:7e:1b:1d:6a:08:8a:44:62:d3:fc:
55:10:88:fa:a0:7e:87:bd:f7:86:7f:9c:d6:b8:57:
75:ad:ca:dd:f9:66:2d:5c:4a:fb:20:ec:9e:f3:47:
c8:48:81:e0:46:1d:ee:be:78:e7:30:c0:22:50:b6:
10:18:5e:58:54:38:28:f7:94:e3:e8:de:e7:ec:0e:
5e:ef:f1:fb:b6:76:60:00:a1:8b:17:35:fd:49:23:
09:9a:0a:09:e1:74:18:77:30:b7:0c:b1:15:1d:f0:
68:7d:a1:22:0d:92:6c:0d:8c:9a:b3:53:3e:60:86:
40:ae:65:6d:50:a7:0f:c9:c4:ee:48:05:23:68:33:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:9D:B3:84:96:94:E6:CC:FD:80:63:09:6A:F5:A4:0D:7F:1A:AE
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:91:5d:91:88:33:cc:ab:21:11:80:3e:b5:72:a2:67:b9:44:
22:9b:d0:b1:44:f4:c5:7f:0e:98:45:16:46:92:10:23:d3:01:
76:58:99:b0:bf:cd:6f:2b:a4:dd:77:a7:8e:48:f1:4c:20:16:
bf:85:45:b6:18:38:df:22:68:f9:54:47:ae:bb:ed:66:d1:90:
2a:42:ad:57:06:82:59:d8:97:40:ce:27:b3:f7:57:7c:73:f7:
68:3f:55:9a:1f:a5:1c:6b:7a:2e:d9:86:f1:b8:ee:f1:96:50:
a9:09:0b:aa:95:71:c7:b7:e9:14:ac:12:d0:00:14:34:3b:93:
ad:49:c0:bb:e6:63:4f:c5:42:de:c0:15:91:42:78:9f:35:c3:
76:2f:72:c6:b9:27:a7:2c:1b:9d:5b:e5:7e:03:9c:1e:15:87:
64:ec:da:58:e8:cd:fd:78:d6:a9:b1:c2:e4:46:70:54:e6:f5:
e8:99:10:c0:9b:f9:b1:cd:47:c9:3a:7c:a3:09:2f:20:24:23:
a9:72:93:b7:86:5f:cc:a8:06:16:2a:12:ff:01:88:31:46:f2:
b6:d5:6d:8e:3d:b8:18:5e:e0:e7:8c:6d:fa:5a:b8:77:8e:34:
80:5a:bc:1a:71:47:62:8c:a4:f8:b9:6a:7e:1c:cd:67:4e:81:
ed:20:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:26:00 2025 by rpki-client