Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File: s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier: fmli3RveiYlyGOLwiC86tjgUFEfkAHVt92G+rmQI6dw=
Subject key identifier: 2F:29:B4:F0:76:99:9D:08:AF:93:E5:62:8B:C7:C2:D8:CA:04:C0:66
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 01974BC48FCBD7DD1BDF56A764B14EF7E57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number: 0AD6
Signing time: Sat 07 Jun 2025 19:01:02 +0000
Manifest this update: Sat 07 Jun 2025 19:01:02 +0000
Manifest next update: Sun 08 Jun 2025 19:01:02 +0000
Files and hashes: 1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: 59b3jAocQGCZaFPy+yDsZJthP95bVyyrI1e2/dY4bWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:8f:cb:d7:dd:1b:df:56:a7:64:b1:4e:f7:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Jun 7 19:01:02 2025 GMT
Not After : Jun 8 19:01:02 2025 GMT
Subject: CN=2f29b4f076999d08af93e5628bc7c2d8ca04c066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:e5:18:f7:35:9c:05:76:83:fe:ce:a8:ea:
71:05:21:d1:7e:b4:48:3c:dc:c8:4b:99:7b:34:9a:
ee:44:a5:19:bf:4a:08:47:b0:57:1e:18:40:55:8b:
c4:8c:26:ce:0c:c2:f6:78:79:c6:37:3b:39:6b:a5:
32:68:60:a5:10:22:7b:b2:54:3f:20:7b:cb:d6:ec:
d5:c9:4a:f7:3a:d3:bb:8a:3b:65:ec:4a:72:2b:d7:
3e:ba:52:d4:fe:2f:4d:b7:99:b6:80:da:57:be:16:
ae:dd:5f:33:93:5c:48:a4:35:12:c6:9f:37:1c:bb:
f6:99:2f:34:bc:7b:41:95:dc:4a:40:58:c5:bd:8a:
0a:39:a4:a6:57:29:24:3e:e3:f4:3d:3c:3b:00:6c:
9b:90:60:5a:17:1d:ce:35:94:02:76:73:99:3f:c1:
40:15:83:62:b2:46:f8:18:89:d6:09:37:9f:8b:48:
77:14:21:69:9c:20:91:6a:0a:a7:09:a8:95:11:3b:
dd:27:4f:29:d2:a6:bc:19:81:a8:60:23:3a:20:d8:
b7:3b:b8:3e:da:ff:23:43:13:f7:9b:ed:a6:4b:59:
cd:0d:e2:e3:31:5c:88:1c:5c:03:b6:45:cd:5b:fd:
0a:87:cf:a6:c1:b6:4d:63:da:67:d6:91:97:85:b9:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:B4:F0:76:99:9D:08:AF:93:E5:62:8B:C7:C2:D8:CA:04:C0:66
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:55:4b:b1:23:2c:fb:4c:1c:44:0b:f0:b3:2b:e9:77:98:ac:
6e:65:85:c9:38:af:d5:c6:2d:5c:fb:53:e8:90:23:29:57:cf:
19:fd:22:2b:92:e6:e7:3d:2f:41:2f:76:56:61:a7:b3:21:a9:
f2:77:09:b5:81:05:aa:46:c0:45:9c:ee:26:02:31:a7:bf:b0:
4b:a4:de:44:79:87:d6:17:2a:e9:b9:38:9d:3a:ab:50:88:64:
54:d7:1c:e9:b6:7c:69:dc:91:8b:c2:5b:6a:ef:71:3b:17:a3:
02:50:b9:93:36:d3:a5:78:60:b5:bc:42:59:8f:30:63:b2:2d:
e7:f6:89:e4:9d:95:c2:12:81:1f:63:f0:a3:ba:e1:d2:dc:8c:
c9:49:2a:8d:4a:47:5a:0a:46:43:f0:bf:f6:26:52:cc:e8:0c:
a2:ba:c1:22:31:ae:e8:50:c7:49:c4:0d:ac:d7:00:7b:85:e4:
68:bc:1f:0d:b3:3c:01:14:66:04:61:be:0a:3d:a9:17:a6:cb:
cb:c9:0f:9f:29:6f:f8:30:b7:f2:8d:b6:0c:39:03:19:1c:7e:
56:1f:b5:bc:e0:5b:77:8d:a2:ac:23:3a:3f:62:75:6e:b6:54:
9a:b4:41:ea:75:a5:3a:78:82:a3:44:f0:c1:1b:4e:cf:85:46:
b7:c2:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:34 2025 by rpki-client