Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: l71Lq1MTtIO65Brqq4Zi63XAAewgrgeg0GHcMYsXEqw=
Subject key identifier: 49:FE:E5:82:89:1A:5C:B5:23:8A:25:24:CF:E5:66:15:68:72:15:8C
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 0197B820EFC8BF43825106F2D7DF67E719A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: HS3954h2NEXzRU47nQF2j9jylykvud3rI8RxGXFdTtY=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ef:c8:bf:43:82:51:06:f2:d7:df:67:e7:19:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=49fee582891a5cb5238a2524cfe566156872158c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:a1:1a:ac:b4:7b:f2:bb:2b:70:9d:e1:55:
b2:15:f8:3d:5f:ae:87:ae:64:a1:23:4b:93:c2:fb:
f3:e3:d9:31:20:b9:d5:4f:dd:18:64:2f:1d:a1:a1:
e6:ca:b9:b4:64:fb:6a:4f:ee:e1:e2:2d:56:03:2f:
08:97:93:05:71:ae:0e:c1:77:a3:98:0d:2d:e0:d9:
0e:26:2b:52:4f:02:01:25:a1:4c:cb:86:69:e2:2d:
19:19:a7:c5:ea:91:4e:15:27:ec:51:65:2d:e2:34:
c5:fb:77:aa:16:11:f4:b1:9c:54:d1:b3:69:9f:37:
99:fd:5f:74:de:aa:f2:50:74:b8:6d:8e:ff:ba:1c:
ef:30:38:14:d2:0f:29:aa:f3:11:15:33:25:14:09:
58:97:0d:6a:6d:b4:a2:80:32:68:68:72:58:c7:d1:
02:89:f4:cf:59:b8:9c:78:18:32:1f:ad:e8:85:52:
11:5c:55:72:0e:28:5c:58:d4:20:06:38:56:26:c9:
5a:78:09:49:56:34:d1:e4:a9:a4:9b:3c:4b:59:34:
d4:0c:3b:04:02:bf:11:bc:6e:a4:0c:07:a2:8e:ea:
e5:c6:1a:af:0d:92:72:09:49:cb:c8:95:61:65:ae:
c7:25:9e:73:9c:f4:3e:f5:96:ce:8e:c5:15:f9:34:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:E5:82:89:1A:5C:B5:23:8A:25:24:CF:E5:66:15:68:72:15:8C
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:7e:aa:29:0c:0e:22:c7:75:6b:b0:9a:99:05:6f:fb:e9:
af:9e:93:d8:0d:b7:03:4e:ac:4e:ff:af:d7:3e:82:71:a4:14:
02:01:26:2a:1d:47:32:36:5c:bc:e8:1d:94:14:d9:87:1b:8e:
69:b7:d7:7b:59:d1:17:3f:f1:4a:95:10:71:3d:5f:72:d0:a8:
9d:a3:07:ee:d8:8f:d3:92:f7:70:6f:dc:ba:14:eb:d8:3c:40:
c3:a1:b3:5e:b7:3a:f2:43:c9:6c:93:95:89:88:0a:b3:6f:b3:
05:5d:32:9a:aa:91:16:e3:63:c3:a0:ae:cf:39:50:99:09:d7:
42:ee:25:62:f6:64:4f:77:33:e5:ae:43:55:94:50:3f:45:ca:
f9:6e:9c:af:f5:9c:a9:26:72:b5:5b:05:2d:ba:7c:c5:27:15:
c1:42:ae:18:53:6c:88:e6:76:01:c2:ab:ae:da:55:26:25:31:
33:c6:85:91:59:2b:50:30:f3:9a:50:7d:6d:46:c7:d8:06:61:
71:e6:25:07:60:5e:22:6b:99:e8:c1:79:b6:72:40:c6:8f:06:
42:51:23:f5:eb:ea:1b:de:56:03:ec:ea:56:32:7b:f1:ed:f5:
69:e8:a6:ef:0e:ec:a0:58:41:44:87:31:df:43:b1:0d:13:fd:
e5:39:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:08 2025 by rpki-client