Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File: 55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier: A6AQInbabE7M9qAjXBbhp+k8DD9Ub4PH+MUQq7aRXug=
Subject key identifier: 10:E8:B6:26:72:48:7B:27:BD:C4:FE:C6:FB:C4:B6:06:E1:E9:C2:AD
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer: /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial: 0197B7EA1D30CACC8B65998B3948538D050F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number: 0A08
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: awBF5aNlfBiyTd4OT+zPc1NBkezopLifl4msYTwo0m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1d:30:ca:cc:8b:65:99:8b:39:48:53:8d:05:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=10e8b62672487b27bdc4fec6fbc4b606e1e9c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:ff:82:c1:8d:4c:53:b5:d1:91:4c:98:2a:
f3:5a:93:fd:36:40:cf:ef:9f:95:a6:fb:b2:e7:b3:
d6:fb:c4:b5:65:12:6f:32:2c:b0:fa:78:6d:b9:cf:
d9:1b:c5:7e:16:b7:1e:ba:39:37:f4:2c:ac:12:c5:
f4:c5:61:10:96:48:bc:56:7e:fa:e8:93:67:e5:17:
54:aa:85:9a:14:55:76:c2:8d:c0:fa:40:3c:e3:b7:
d2:f3:c8:1a:98:f6:c3:71:7b:d9:29:72:4a:14:2a:
0a:73:17:9d:bf:3b:98:27:6b:56:8b:3e:5e:b5:18:
e3:8e:ee:91:f8:ea:8c:03:aa:7f:0b:9d:32:db:6c:
d3:29:ea:60:7f:41:8b:c7:b9:d9:8b:be:85:d1:5e:
59:a6:0a:3a:d3:e6:92:9e:b3:bf:30:7a:72:a2:d3:
cb:a8:8a:2d:2a:61:64:96:f1:fb:63:c8:62:dd:37:
b1:23:38:00:d5:75:01:78:ca:cb:17:b0:e8:28:c9:
d2:1f:79:19:79:a4:c4:d7:c4:a2:f2:84:6d:cd:e8:
79:1f:bf:d3:8c:2e:06:b0:14:b1:18:4f:86:58:8d:
4a:da:12:27:7f:b6:35:58:95:51:89:f6:ae:c8:0b:
b9:9e:ff:a4:3f:a7:af:2a:10:0a:5b:0e:ff:02:0b:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E8:B6:26:72:48:7B:27:BD:C4:FE:C6:FB:C4:B6:06:E1:E9:C2:AD
X509v3 Authority Key Identifier:
keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a1:2d:f2:a7:82:cd:5e:42:01:f5:54:c4:b8:f0:82:eb:46:
51:4d:b8:f1:88:89:2e:e6:e1:60:30:6c:62:80:ec:42:88:28:
10:bf:0c:eb:73:df:d5:61:fe:e0:65:3f:2d:fc:4d:9e:bb:cf:
c4:47:20:b9:9d:b8:e7:a9:be:50:77:a9:2b:00:6b:e6:18:1d:
ee:f4:c1:28:85:3c:e6:f5:3d:51:08:4c:93:b2:48:44:4b:31:
d8:c7:82:ca:90:a1:1a:df:45:0d:7b:ce:c7:f5:e1:c9:ce:00:
0a:37:ba:c1:00:54:dd:f5:b0:99:f9:37:cc:13:c7:f8:b2:91:
2c:35:54:5c:1e:33:df:3f:13:f4:0c:19:2a:e3:29:fe:b1:fa:
c6:c2:d3:ab:cd:d9:4d:b6:0e:18:b1:f3:cf:33:2c:8c:f3:ae:
8c:c4:f4:26:62:0d:37:a2:d8:ae:bc:59:e9:14:99:a5:ac:0b:
51:10:07:59:cd:b3:d0:94:e5:a5:e9:93:67:e8:d4:77:28:14:
43:a3:48:e8:88:bd:c1:f1:5a:34:ee:93:5f:05:8c:bd:96:90:
20:e4:37:f3:7e:c7:63:a6:c2:a7:4f:65:4d:f5:00:ab:a1:bf:
c6:5c:25:f2:4a:fc:d1:fe:ae:6e:5d:e6:81:ef:55:74:d4:bd:
34:17:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:17:07 2025 by rpki-client