Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: IuF4odqL0yTEbxv3oARwOKeJMQHAa4Y4rBXaBro54N8=
Subject key identifier: 75:71:F6:C1:20:4A:3E:8F:BC:88:DB:66:A9:A2:F8:3A:F4:99:C2:9B
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 0197B7EA29D3B6B4DDC1AF28E69F3C28B4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0C9D
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: yhbEJqIJrFT4b6OIyHcW3iSAipEwHor4wSFi/oP6gsU=)
2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:29:d3:b6:b4:dd:c1:af:28:e6:9f:3c:28:b4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=7571f6c1204a3e8fbc88db66a9a2f83af499c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:8e:7a:1e:ad:08:64:2d:26:15:fc:01:fc:
f7:8f:40:75:e6:70:c5:6a:4c:65:a6:d1:c5:09:57:
2a:c8:ff:a6:8e:73:08:07:ba:83:84:87:26:94:54:
fe:8e:81:ec:c8:c7:f5:70:7b:36:34:c5:df:13:13:
82:32:53:f0:7f:60:3a:11:73:82:3d:03:b5:78:a9:
74:f1:10:6b:77:01:fe:4e:65:16:94:d5:9c:5a:e3:
e3:a8:d7:be:6e:be:72:b9:b4:94:14:91:50:c4:80:
a7:d8:c8:ec:b6:5f:69:f8:6f:8f:2b:0e:9c:15:97:
4d:a2:cc:ff:12:72:8b:55:25:d3:75:e6:df:bc:88:
3f:cd:ca:aa:83:fc:07:7c:12:da:da:ff:24:7f:78:
d6:f6:08:6c:9a:f3:5c:ee:e0:c0:12:9f:54:1e:ea:
1d:9d:15:9b:12:8c:53:a9:c4:7e:d1:0c:7e:0b:36:
18:d8:d8:91:41:13:93:bf:63:65:1b:06:ec:df:33:
05:90:38:43:64:22:cb:48:66:a2:0f:e2:0b:24:14:
f4:ce:67:0c:f5:21:cd:5d:96:56:ba:0f:2a:1b:84:
ff:47:93:1f:63:9e:3d:86:d6:f0:4e:d3:2d:ab:0a:
ae:93:c3:9b:ba:ef:f3:4a:ec:a6:36:55:8a:cd:8f:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:F6:C1:20:4A:3E:8F:BC:88:DB:66:A9:A2:F8:3A:F4:99:C2:9B
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e0:5f:29:89:76:48:a2:fb:60:96:b8:5d:2e:cc:2f:44:43:
3e:4e:37:58:47:e5:c7:2d:02:c3:0c:c8:47:fe:8b:9b:63:c5:
b1:4a:b9:f0:b9:9c:45:18:24:b0:90:4f:6f:0b:13:3f:2e:03:
83:34:45:2f:4f:ba:56:b4:18:53:fb:44:c5:42:88:4c:34:11:
bf:03:83:ca:36:0b:3b:5e:ca:ca:6c:82:47:e0:78:b2:23:18:
96:8f:f1:93:67:39:6a:1f:c5:d0:ae:bd:8e:14:b9:e0:cd:8d:
c9:c8:ed:c9:98:c1:85:dd:dd:0b:95:f2:a1:69:52:69:66:0a:
ca:e7:80:30:7e:51:77:f9:32:1f:97:2d:97:7c:25:e7:7a:49:
1d:6e:90:73:e5:c0:eb:72:3f:0e:7b:a0:b4:da:e0:e6:ae:ee:
75:9f:90:52:6f:d3:16:19:30:d3:f2:e5:5b:fc:9c:51:f3:b0:
74:7b:44:5c:d1:9b:b9:2c:6b:48:37:8d:8e:cd:62:93:18:29:
e1:0b:22:24:1c:0d:f8:b2:a8:12:17:99:62:ad:a1:85:89:bb:
8b:5b:30:bc:04:30:bc:f3:01:24:f7:5b:9d:2c:41:bb:b2:0f:
76:40:3c:61:86:b1:42:29:94:db:f0:35:7f:8f:46:c0:9d:ec:
64:d5:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:39 2025 by rpki-client