Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
File: e7gN7MxW6zZrNswpZMgZuxtymts.mft (raw, json)
Hash identifier: 585KPo+5EfLjhTtoTaWLIrvEuxBrPSd6g8x9aa8eHzQ=
Subject key identifier: 73:A1:AA:46:66:99:32:69:37:96:1C:53:D6:4F:5A:C5:1A:D1:97:E9
Authority key identifier: 7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
Certificate issuer: /CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Certificate serial: 0197B6A0FD9EE4F64BFE45CE20CB0E37892E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
Manifest number: 0A1C
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: e7gN7MxW6zZrNswpZMgZuxtymts.crl (hash: JBYBmU9D7ZCTYL24efudJTYwMDu98U2v0gFzapeJA24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fd:9e:e4:f6:4b:fe:45:ce:20:cb:0e:37:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb80deccc56eb366b36cc2964c819bb1b729adb
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=73a1aa466699326937961c53d64f5ac51ad197e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:24:af:ba:d1:2a:af:b3:42:f1:c7:a1:60:
ca:8f:af:9b:09:0c:e3:7c:09:94:82:30:1b:7b:05:
7b:4f:2d:b6:46:0a:9b:67:5d:6b:52:e8:89:54:ed:
42:35:47:9f:31:20:e1:88:90:3a:f5:a0:54:4b:fd:
20:d6:b7:80:3a:85:6f:b2:d9:36:30:62:35:d6:0e:
0f:fa:5d:e9:c8:33:ba:96:c4:9b:2d:50:d0:6e:99:
23:3b:ca:8d:b2:a6:db:57:98:d8:7d:8e:6a:ca:df:
34:4a:8f:45:67:f0:dc:16:7d:ef:9c:61:de:e7:6c:
a5:0c:51:0c:92:9e:f0:c8:48:32:09:7a:5d:dd:89:
1a:d1:16:7d:e9:e1:ac:3a:f0:e5:60:47:07:a3:5f:
3c:55:b0:a9:de:71:78:c7:c5:1f:14:2b:77:7a:52:
7c:55:f3:6e:cb:4d:7c:2a:7f:92:45:10:60:84:5a:
6e:b0:48:54:8e:bf:16:81:77:e1:b7:23:2e:ca:88:
91:ba:24:4f:12:bd:2e:4c:12:a0:90:00:d8:75:09:
dd:e6:69:49:ce:47:4b:70:5c:8d:af:cd:22:27:3b:
07:40:a3:e9:54:20:e6:d0:4f:44:cd:db:cf:8e:7b:
08:b2:8d:9e:8d:f3:67:dd:c6:fb:3c:8a:f8:d4:80:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:AA:46:66:99:32:69:37:96:1C:53:D6:4F:5A:C5:1A:D1:97:E9
X509v3 Authority Key Identifier:
keyid:7B:B8:0D:EC:CC:56:EB:36:6B:36:CC:29:64:C8:19:BB:1B:72:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7gN7MxW6zZrNswpZMgZuxtymts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1c3f89-33e1-4d64-9235-4aa927729672/1/e7gN7MxW6zZrNswpZMgZuxtymts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0c:cf:a6:37:d7:de:33:0b:fc:2f:a2:47:47:2e:18:ef:64:
74:2b:2f:0c:1d:8e:e7:97:e9:1d:fd:8b:e5:f0:82:54:80:2f:
f8:e6:fb:f6:32:2b:09:58:92:90:b6:50:40:55:96:16:3b:69:
e1:bc:88:0c:71:5d:17:38:17:9b:63:14:8b:ff:f1:8d:fd:54:
9b:3f:4d:3b:be:16:e7:d8:cc:c6:69:32:35:15:05:e6:b6:b5:
bb:4a:a5:af:8b:b2:3c:64:6a:18:ab:38:97:b4:91:9f:e3:d3:
9f:8f:21:c4:ff:48:1c:85:bc:f8:13:c2:c2:62:2f:59:3a:65:
cf:e8:44:4d:3c:c5:cc:7b:43:da:d5:bd:82:97:53:9a:48:33:
75:74:1a:f8:54:15:2e:32:80:29:9a:b1:17:1c:ee:7e:bb:64:
3a:40:72:eb:38:56:74:eb:f7:79:5a:69:0d:b1:fa:d8:5a:d3:
ea:be:f0:77:74:85:f4:2a:b8:e8:d9:a9:8c:9b:cc:87:14:76:
b1:ec:65:65:6a:b8:b8:f8:e5:a6:6c:ad:9f:d8:5c:ae:f3:d5:
65:60:49:a2:9c:a3:62:a9:2a:e4:c7:37:d7:e9:d9:59:50:12:
f0:89:0c:48:75:d9:5e:50:60:3d:9b:9b:ab:7f:6a:f4:ea:eb:
cd:8f:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:40 2025 by rpki-client