Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: fnJNLVofPrqX5I6kYpw1pODvxFfIi8aFx6CEa3Ku+PA=
Subject key identifier: 71:A8:EE:CE:08:2C:96:28:96:99:68:57:7A:57:98:BE:1D:9B:CE:74
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 0197B7B36C8F6002E121DEAC901ABA36AE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 0504
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: mWfdl2Mq7ibByNHAfDqminmKzAHcSmGTc8Ch1mpNM8U=)
2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6c:8f:60:02:e1:21:de:ac:90:1a:ba:36:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=71a8eece082c9628969968577a5798be1d9bce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:9e:27:95:77:ae:66:63:d1:61:7f:67:1a:
1e:55:02:d1:fa:a5:53:e1:06:83:6a:5e:ad:ea:6d:
3c:64:5e:66:25:7a:c6:b8:86:11:5c:d3:17:99:44:
ec:1a:3b:c3:c4:35:7c:fb:f4:cc:97:68:4e:98:30:
f2:da:9f:46:9c:a8:5a:c3:40:42:f5:32:cc:df:20:
c6:c4:d9:65:4d:21:92:47:e1:50:6b:24:cc:8e:ac:
a9:cb:dd:d6:c5:6c:fb:3d:c2:60:1a:23:6d:9c:df:
17:08:60:e1:27:d9:52:dd:c5:51:50:70:61:c3:a8:
34:e0:57:ca:94:b5:81:c1:73:19:7e:b1:90:ba:b5:
32:09:dc:c8:d8:98:e3:86:85:8b:02:90:28:10:0e:
e4:85:65:b6:e2:f7:c9:b1:cf:94:32:62:51:a7:8b:
14:cb:19:8a:62:53:0d:fb:1e:e8:d4:e2:f8:ef:08:
da:ca:9e:4b:b3:52:b6:af:4a:db:24:17:11:63:c1:
60:ea:b2:82:62:7b:7f:28:b2:5d:51:be:b7:e4:99:
03:bb:cc:40:c4:59:18:be:d6:b9:cb:8a:94:a1:68:
fd:6c:11:fd:90:1b:48:93:a2:16:4c:32:d6:10:c5:
76:5e:de:87:a4:75:7f:68:39:1e:fd:5f:3b:d3:2f:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:EE:CE:08:2C:96:28:96:99:68:57:7A:57:98:BE:1D:9B:CE:74
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:71:17:79:82:9c:b3:bd:d4:85:5c:99:27:f9:36:76:4d:
e7:a8:82:54:a6:68:d7:92:12:52:61:28:73:4e:25:59:2b:ce:
13:9c:88:2c:6c:29:eb:42:b2:8a:47:af:3b:82:1f:b5:15:ee:
e6:5e:c4:6c:53:2d:f5:2f:cc:97:cc:90:d1:9f:29:e1:5a:ad:
e6:46:15:7f:2f:a7:c0:84:73:57:e3:81:ea:20:70:17:b9:a6:
ed:89:62:2b:9e:c5:fd:da:b3:64:7e:5a:ae:29:09:13:01:3d:
50:f0:74:18:96:04:f5:75:ea:39:47:b9:aa:f1:8d:05:3b:30:
30:4d:51:97:a5:ac:26:75:c9:9b:50:87:8c:65:a9:e8:d3:4d:
8f:df:4c:6d:99:00:ba:63:f5:01:71:93:0c:29:be:01:08:44:
a0:d8:28:61:9c:43:85:52:ba:dc:d5:e8:5d:a1:1a:bd:d2:87:
48:ab:18:c7:4c:0e:56:43:aa:be:b1:3f:1c:0d:58:dd:6e:ac:
22:b8:50:5f:87:73:5d:55:b8:3e:0c:6c:8b:b1:ea:f7:54:95:
52:02:04:10:3a:92:17:47:fd:e2:b1:d4:1f:36:56:1f:bb:ea:
3a:48:eb:ae:39:ef:e5:10:f4:64:2e:a1:a0:65:b8:d5:8b:58:
ca:16:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:57 2025 by rpki-client