Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: Br7Bv5kwisGPEerYQfibS782DS0FsGEsY5ma7yk+NfE=
Subject key identifier: AA:CE:CD:7B:F9:61:8A:26:03:ED:3E:ED:53:54:6B:F3:3F:56:1F:43
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019764A87A05237403A7C86653EBE74E54E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 15:00:52 +0000
Manifest this update: Thu 12 Jun 2025 15:00:52 +0000
Manifest next update: Fri 13 Jun 2025 15:00:52 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: hCYapCdkPkV9MRzinkmDzjvmghvIcUv/9wkFEbwREO4=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:7a:05:23:74:03:a7:c8:66:53:eb:e7:4e:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Jun 12 15:00:52 2025 GMT
Not After : Jun 13 15:00:52 2025 GMT
Subject: CN=aacecd7bf9618a2603ed3eed53546bf33f561f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:2e:9b:35:ef:3f:e4:fd:2e:38:a6:bb:19:
a6:e4:ac:62:62:be:c2:01:d1:45:37:e4:04:0c:99:
8a:4b:71:fe:86:28:04:48:29:6c:59:af:18:64:20:
a9:ce:25:34:49:7a:f7:a6:f5:0d:f6:67:e7:6c:c7:
81:e2:c7:34:cd:5e:d5:93:49:c2:d3:b2:5a:9f:68:
df:36:93:10:21:21:08:72:f0:43:19:7e:bf:16:d5:
4c:47:80:c1:45:db:0a:c3:16:31:bd:78:4f:cb:0a:
30:f1:70:67:41:f0:28:59:3d:c4:17:e2:39:9f:f5:
49:d9:27:04:27:77:13:51:7f:83:46:8d:26:38:03:
c6:90:42:ad:cb:48:17:3e:bb:31:81:4b:ca:6d:3c:
da:8c:9d:19:7f:b7:d6:5d:d2:24:fa:a4:04:e3:78:
33:45:52:ee:19:87:c2:27:74:2a:46:fd:1d:58:6b:
69:9a:83:e5:36:9b:37:a3:4c:b3:47:87:48:46:c1:
ea:ff:72:0c:c8:0a:4e:6c:35:9b:ad:f0:c3:08:1e:
d7:70:10:0b:fb:9d:42:e4:df:cd:11:66:be:d1:f0:
cd:17:48:e1:74:b6:a8:50:8b:68:89:fc:23:01:e0:
a4:de:0b:24:c3:8d:42:e2:c0:30:d0:40:83:ca:c6:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:CD:7B:F9:61:8A:26:03:ED:3E:ED:53:54:6B:F3:3F:56:1F:43
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:7d:34:60:9c:c5:d6:76:0e:5a:e4:cb:17:c8:b4:d4:8e:
f5:50:fa:52:17:b9:54:bc:11:c2:17:dd:d8:7e:25:84:f8:4d:
5d:2c:9d:22:e0:a1:df:50:19:a6:f6:5b:c3:3a:11:f8:53:98:
b5:42:0c:02:74:62:8a:e7:c7:66:42:2d:0a:45:ca:5d:6b:df:
8c:0d:86:bb:99:d7:3e:5c:97:ee:9e:ed:e4:57:28:6b:3f:84:
f9:61:eb:5e:89:16:5e:12:67:7d:29:d6:33:f5:ce:c3:8b:6f:
e9:eb:e5:33:2c:94:c2:b6:93:b7:c5:d5:4f:6a:53:bf:b6:c2:
d4:d6:75:a6:a1:cd:cc:06:19:4b:00:21:cb:d8:39:d2:24:28:
5f:44:28:97:dc:9a:c1:0f:f1:b8:34:37:d6:36:7a:22:cd:45:
a3:ce:0f:33:ca:d0:07:ee:89:ab:37:ce:3a:18:90:83:90:6b:
b7:57:c3:09:a6:5a:36:ab:9a:60:9d:a3:d5:0f:15:22:ae:9d:
7d:50:55:1f:a3:70:fa:53:60:f7:86:5c:f9:90:c2:16:2f:02:
0f:7a:11:3e:4d:78:6c:17:b4:76:0c:16:75:0a:3e:f7:bd:78:
7d:34:1d:19:bd:4b:3c:1d:72:a8:4f:20:56:3b:8d:0e:0e:b1:
aa:62:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:20:56 2025 by rpki-client