Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: 7RWkrNB7DnF45meOmTs8K3NA76rYAAdKUulpCZuKcqw=
Subject key identifier: 0F:D1:DA:C7:C5:09:19:62:3E:C0:07:88:E0:AF:3B:D0:5C:B2:6A:85
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0197C0ED295F162CAA6055BE0B6F97866C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 15BE
Signing time: Mon 30 Jun 2025 13:00:57 +0000
Manifest this update: Mon 30 Jun 2025 13:00:57 +0000
Manifest next update: Tue 01 Jul 2025 13:00:57 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: p/lVjEkarqopK9XhICsL/1o7c6mxXQseU8OAvFF5Mog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:29:5f:16:2c:aa:60:55:be:0b:6f:97:86:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jun 30 13:00:57 2025 GMT
Not After : Jul 1 13:00:57 2025 GMT
Subject: CN=0fd1dac7c50919623ec00788e0af3bd05cb26a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:13:83:7f:f8:1e:96:73:45:b7:af:8d:64:
0c:97:c6:55:83:fc:67:06:e2:28:fc:bd:3e:15:34:
b5:26:2b:4b:39:00:05:51:5a:4d:92:3b:b7:90:6d:
27:a6:a0:2c:94:bf:7c:ff:4e:a7:4f:d7:47:08:ae:
2f:81:4e:64:31:21:8b:a9:d8:0e:93:77:46:7f:4b:
b6:02:8f:17:b7:c7:0a:54:35:2c:f4:e7:d1:2d:51:
fb:a8:97:e7:8a:78:08:07:5b:38:be:1e:45:8e:cf:
54:db:2d:75:58:b8:bb:2f:6b:6b:14:0b:c7:73:bc:
56:1f:02:c3:1d:8a:9e:da:46:d0:1c:d6:06:79:0c:
5b:d0:39:73:ab:79:da:0b:ca:33:6d:61:4a:4c:c4:
ef:99:ac:eb:2c:fa:27:6d:fe:02:55:25:ba:1a:0d:
1a:59:98:e0:a0:66:e3:48:53:95:15:31:90:b7:53:
ff:8d:33:c5:af:83:05:a3:b6:11:ad:bf:77:74:70:
61:20:a3:d4:03:33:e5:ee:4c:84:69:7b:64:3a:21:
68:82:80:86:d0:96:17:9d:4e:2c:43:2f:73:4e:98:
36:b0:af:a7:81:90:25:a0:3a:f9:74:52:a7:a5:13:
ff:21:bf:e9:31:8c:31:aa:d2:63:c0:50:69:fc:73:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:DA:C7:C5:09:19:62:3E:C0:07:88:E0:AF:3B:D0:5C:B2:6A:85
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:e2:b8:f2:2e:d8:1c:d2:08:f8:b2:3f:11:09:8b:cb:32:
c4:6b:56:04:b1:82:59:b9:00:f5:8d:97:bc:49:8c:a6:3c:95:
21:9f:36:58:87:55:1a:b9:e0:81:8e:e2:d8:f8:cb:97:5c:a2:
96:44:ee:18:61:61:97:34:32:4d:ce:52:85:89:5d:ad:7d:a7:
11:de:7a:70:2c:88:02:07:cc:cb:b8:50:3c:1d:de:fd:6d:3c:
8c:7a:5f:67:1c:1d:24:d5:09:ce:de:cb:da:52:de:82:e9:93:
f3:85:50:f7:70:d3:de:75:0e:ff:52:b6:2f:24:af:74:e5:17:
2a:ee:56:01:04:d9:f2:0b:84:e3:f9:50:55:6c:e8:a5:8c:99:
2b:e1:e1:46:5b:c8:b5:b6:4a:b5:2d:57:10:18:f4:06:63:29:
1a:a9:8a:ea:c1:eb:c3:66:8c:8a:15:db:c2:19:fa:6b:3e:4a:
d1:aa:44:e9:03:11:f3:e1:af:a4:88:c0:bc:1e:7e:ba:32:af:
0a:b6:96:6a:4d:56:09:77:b7:b8:04:05:fb:85:a3:19:b8:dd:
c9:7d:a9:81:b3:c9:b6:88:df:f6:5c:7b:ca:79:0d:b1:6a:c5:
76:3e:00:6a:97:85:8e:90:09:95:43:cc:46:86:5e:f8:03:c6:
97:54:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:11:31 2025 by rpki-client