Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: wS4pPtntt6tyeaBI+1/v8tf0W1adQk8t7RO3YmNAvqA=
Subject key identifier: B3:A9:FA:0E:66:F9:4C:B6:74:BB:FA:BD:C4:26:9A:E9:23:9C:1B:37
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 0197C94BE7D21ABA13C4F0360A48E3C09EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0B7D
Signing time: Wed 02 Jul 2025 04:01:24 +0000
Manifest this update: Wed 02 Jul 2025 04:01:24 +0000
Manifest next update: Thu 03 Jul 2025 04:01:24 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: 1yHKkK5pOFnJuIzmF4Yp/HwIDZtkfTHWbFoYi75DlAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:e7:d2:1a:ba:13:c4:f0:36:0a:48:e3:c0:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Jul 2 04:01:24 2025 GMT
Not After : Jul 3 04:01:24 2025 GMT
Subject: CN=b3a9fa0e66f94cb674bbfabdc4269ae9239c1b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:26:b1:6d:34:88:6c:39:42:b3:b1:b5:a6:
46:11:7f:c1:c6:09:95:31:cc:4d:da:f2:2b:06:2c:
2c:47:ed:33:ae:ad:c1:cf:ab:58:de:92:88:d3:7c:
dc:c5:31:b5:58:b4:ee:27:ab:45:bd:2b:60:7a:11:
ec:56:f9:06:95:8a:c8:95:c5:a5:ea:43:30:fa:3a:
93:1c:ee:b2:f2:c6:33:90:7a:12:5e:2c:93:cf:33:
e1:04:de:a1:70:a0:c2:57:29:56:de:c9:bb:69:d5:
54:34:ac:2e:21:ab:1d:22:ff:32:c9:bc:5e:bb:cc:
a9:b3:6d:bd:a7:30:77:1b:44:ef:a9:8a:7b:4c:02:
ac:a5:5d:13:5a:af:3d:9c:9d:d1:dc:14:3e:62:8e:
7f:49:ac:df:ab:ce:f8:e0:52:6e:6f:0c:83:ab:6d:
92:34:52:44:e1:61:ef:db:ce:0e:c3:25:9c:66:82:
53:41:ee:9e:59:29:f8:bf:f0:7f:d1:fb:fd:cc:1a:
53:c7:67:2e:00:45:43:ee:04:33:97:45:a5:7c:f6:
20:52:8d:7e:44:32:04:e4:6d:cc:75:77:09:21:5a:
09:7e:9e:e6:2d:18:32:5b:62:18:93:cc:9b:3a:27:
a2:73:48:67:97:cc:fb:fa:6a:9e:f5:96:0b:4f:11:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:FA:0E:66:F9:4C:B6:74:BB:FA:BD:C4:26:9A:E9:23:9C:1B:37
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:3e:23:97:ae:69:f0:f3:cd:f3:cf:d1:aa:bf:ff:ef:cc:
4c:5f:9e:e5:ba:e7:75:98:e7:7d:4b:f3:9e:74:5f:ee:13:f2:
f4:0c:3a:ae:2b:1b:05:15:a6:06:c2:77:f3:c2:05:af:71:d3:
e0:01:7f:4f:05:15:96:a2:32:2d:fd:52:93:68:dc:1b:3e:2d:
bb:a2:21:d2:29:7a:58:33:bc:08:e0:6a:bf:e6:16:f9:80:7a:
2e:3b:be:20:df:19:59:07:3a:78:03:dd:f3:b2:91:43:fb:42:
9f:e4:68:83:87:6d:eb:1b:84:99:fa:54:31:5c:46:35:d0:03:
9c:88:cc:a6:6f:f5:bd:e9:85:e7:48:0f:25:87:e4:78:28:f4:
14:86:c8:1a:b1:be:3a:ec:5f:27:85:64:8b:4f:f8:92:90:ed:
a9:ea:94:24:2e:0e:f2:9b:e4:21:cc:15:3b:7a:89:8e:dd:a4:
49:b0:dc:9e:6b:39:df:74:1a:45:03:c5:80:7a:11:b6:e0:8a:
92:5f:d3:42:4c:13:e6:66:e3:10:19:ae:e4:9e:88:fa:ad:18:
13:23:7e:e1:0e:c1:5d:7e:1c:ef:d5:23:e5:9f:d7:e9:c0:25:
8e:a4:01:36:75:38:24:e9:f5:2b:a8:7e:f6:29:d2:cb:cc:f6:
40:b7:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:13:40 2025 by rpki-client