Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: yRy052flaCHwmfxUU25/yFefwTLbEKgqfKZvsIrWluA=
Subject key identifier: D8:38:6F:B0:AF:86:DB:2B:91:66:13:D6:58:E9:BF:E5:04:15:A8:C5
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 0197B6A204568AABC1CA76725CDA91C1E18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0828
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: hI0mVZquNmhQUhRDaU+J53osvjUgED2lyLQlgYCnQPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:04:56:8a:ab:c1:ca:76:72:5c:da:91:c1:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=d8386fb0af86db2b916613d658e9bfe50415a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0b:3c:c4:61:7f:d6:4a:53:f5:ff:3c:1c:4b:
47:f0:ae:20:ef:bf:b2:dc:9d:e3:d6:8e:b0:32:44:
fd:9d:13:55:33:d1:63:ce:a3:72:a2:b6:3b:de:fb:
42:bc:5b:dc:69:d3:d2:30:6b:57:fa:bd:b4:87:db:
b4:d2:1e:4c:19:13:25:db:dd:e5:9e:f1:ef:14:f1:
70:a7:d4:43:59:07:f2:34:2d:8b:76:6d:59:ac:9e:
17:14:af:89:19:d9:69:2e:4f:46:75:3c:f3:57:6f:
3b:28:2a:b0:fa:46:e4:ed:3a:cb:02:a6:9f:1e:0f:
78:de:b1:ed:d4:0f:ac:f0:fc:e5:52:0e:fe:5c:71:
6c:b6:b8:95:47:65:b7:c5:3d:a4:0c:f6:59:1f:14:
34:f1:26:df:8d:97:b1:49:b0:a5:eb:3b:1d:9f:75:
43:a6:fd:be:82:fe:bf:52:e4:72:e4:89:1d:7c:18:
b9:b0:a0:a7:fa:fe:d6:54:f0:5b:cf:2b:12:13:0a:
95:78:a4:cf:ed:2a:e4:c0:a8:38:1b:51:e2:48:91:
74:61:94:2e:96:98:58:06:c7:0e:cd:10:7b:9e:4f:
91:e3:f7:f6:75:23:7b:52:9c:c2:38:38:e3:2d:58:
ef:c0:0c:62:12:5a:5d:1f:13:e7:be:72:b6:74:74:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:6F:B0:AF:86:DB:2B:91:66:13:D6:58:E9:BF:E5:04:15:A8:C5
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1b:da:32:89:9f:1e:db:fe:b3:78:07:1d:ab:54:c4:f8:16:
b1:1b:69:c9:20:70:d8:38:37:05:e6:c4:3d:0f:7c:e9:ff:3f:
68:1d:5f:0f:d7:49:ec:d5:6f:c0:c8:a2:50:b4:cc:17:df:57:
53:92:0a:7d:d5:02:66:f8:e7:19:cb:5e:9e:92:57:fe:08:39:
4b:1e:fa:6f:96:3d:15:3c:71:ab:0d:1f:f4:2d:06:df:12:ba:
41:26:07:60:1f:49:19:d9:32:a4:02:62:26:d0:c1:86:62:fc:
42:b1:4f:23:ad:58:3a:d6:49:7f:31:71:61:3e:de:e7:a8:dc:
33:ea:5d:9e:9d:2e:b4:c9:13:b9:1e:e5:2d:8d:ae:07:b5:c8:
fb:1b:2d:3e:86:17:74:e6:b5:a8:2b:e0:70:06:39:df:81:82:
c1:d9:a4:0e:28:69:d0:ec:67:f8:74:e2:ca:8f:e3:0a:2e:d2:
6d:47:0b:2f:a2:2a:ad:a3:15:11:b3:b9:bd:a3:1c:98:ef:43:
08:41:14:15:ea:e8:fe:c4:f2:2a:f0:8e:89:58:6d:19:3e:db:
13:29:de:ca:f7:68:46:a3:f4:4c:9c:c0:30:ed:b2:4c:bc:78:
56:e1:22:16:27:c1:e6:31:5b:e0:ed:2e:ed:32:a2:b4:26:ba:
47:1b:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:59 2025 by rpki-client