Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: soHPA7yQRBTbKChOGoXk+mCwCg3B6yCxX8mM+VK6xZ0=
Subject key identifier: C2:AF:4A:46:D7:87:52:C9:76:38:B6:56:7A:1E:53:20:61:60:76:B9
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019757C8928C9E3AAD84CC7B3E69909BF0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 07A9
Signing time: Tue 10 Jun 2025 03:00:51 +0000
Manifest this update: Tue 10 Jun 2025 03:00:51 +0000
Manifest next update: Wed 11 Jun 2025 03:00:51 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: Py3y1ncNhO3UekhWOlN/SsAjoMgxwmgHXGOgLk0vftY=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:92:8c:9e:3a:ad:84:cc:7b:3e:69:90:9b:f0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Jun 10 03:00:51 2025 GMT
Not After : Jun 11 03:00:51 2025 GMT
Subject: CN=c2af4a46d78752c97638b6567a1e5320616076b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:14:2d:b8:1a:b0:8d:ae:67:88:5e:b4:03:
7d:07:84:86:f9:2b:7f:3e:f1:5e:6b:e3:dd:89:30:
4f:d4:da:da:71:5f:73:6d:aa:d8:16:7e:00:ef:0e:
f1:33:40:fe:7a:a2:1f:05:5f:32:83:34:1d:db:89:
f5:27:e7:62:3d:05:b9:5b:ec:7f:35:c8:6e:58:85:
50:bb:21:7e:99:1a:9f:96:17:b7:14:fb:b0:5c:ef:
4c:20:b1:7d:2b:ca:fb:99:ca:7d:5a:a8:b9:c5:ef:
24:b5:c4:fd:93:88:1f:3c:75:7c:64:bf:8a:95:d7:
0d:9f:3b:06:d8:50:bb:f3:32:66:c5:4c:9b:2d:67:
3b:f6:81:5a:a8:ea:6f:9c:fa:8c:60:2a:e0:b7:ab:
f1:77:87:08:8e:af:c7:38:ba:74:c2:00:0c:78:3d:
db:39:52:5a:76:c0:f0:fd:b8:96:5c:67:7b:bf:e2:
da:14:f0:75:6e:8a:bc:5a:7f:bc:51:13:19:d8:82:
c5:18:0c:c1:88:e2:eb:01:16:54:38:f6:7d:3f:99:
03:9e:19:53:f5:b7:b1:a7:00:55:dd:42:e6:d6:9c:
c6:e6:44:fa:16:af:fc:15:7f:35:ec:b9:9b:06:9f:
ad:57:4a:4c:c9:a8:f0:cd:55:62:52:5e:25:01:ed:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:4A:46:D7:87:52:C9:76:38:B6:56:7A:1E:53:20:61:60:76:B9
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:6b:08:be:00:28:ab:4d:15:f5:02:37:0d:78:74:b9:44:
29:1a:8e:6a:dd:d4:35:15:4d:84:aa:9f:f8:c4:3d:8f:c2:f8:
ad:f2:6e:38:15:bf:68:4b:cb:d6:b6:93:f3:1d:41:41:44:fc:
c5:78:d2:5b:94:fc:14:a8:a4:55:33:e8:6d:8d:a9:09:14:17:
27:31:df:7d:c1:df:95:ab:a5:f4:ae:14:3e:f7:c3:26:e2:f5:
da:a1:fe:5b:da:bb:81:a7:ac:0b:b1:9e:57:6c:4e:ca:05:13:
8c:5a:08:fa:57:0b:f1:fd:2f:24:4e:49:f9:02:f2:da:e7:19:
00:ca:09:23:14:8c:39:8a:18:c5:63:07:96:77:56:1d:81:f4:
bf:02:c0:6e:0c:fc:d7:42:0c:1d:30:c1:aa:57:75:e5:15:bc:
40:63:f9:60:ee:2c:b9:e7:8b:f4:ac:dc:a9:1c:0e:3a:1c:a8:
ca:f0:3e:f0:18:fd:c5:88:53:e9:92:b0:b2:40:50:34:45:89:
10:3e:e1:97:44:92:c6:d2:cb:91:2c:19:83:15:34:e2:69:39:
18:7d:07:cf:4b:96:08:a1:3c:72:09:da:3c:6e:bf:c7:9f:58:
bb:3e:80:b4:49:67:f2:f7:1c:1d:89:f1:c6:84:ad:cf:e3:92:
a4:31:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:26:12 2025 by rpki-client