Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: jN2FENUJmg91kPNyCpzb+K+B2u5m+m6Er9M9LHGrDRM=
Subject key identifier: D5:4A:8F:11:52:48:0F:A9:4E:C5:77:85:1F:34:A9:82:95:C5:EF:C0
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 0197B7455225EED435287341B487C2F6D5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0B10
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: TML5dn7lbFdTbTkUgeZ9cNwyOpYYbVP2V1mtC+r92go=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:52:25:ee:d4:35:28:73:41:b4:87:c2:f6:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=d54a8f1152480fa94ec577851f34a98295c5efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:43:61:8e:f5:46:3b:4d:cc:e3:11:7d:14:
73:31:09:f4:71:35:82:95:68:5e:c1:85:2e:f8:99:
85:00:bf:1c:f9:46:a7:29:eb:fd:8a:1f:16:c1:78:
dc:30:aa:1f:f0:9e:eb:66:1c:e4:34:20:8e:ad:b9:
d1:68:cb:66:d2:df:7c:f4:fd:ff:be:82:75:22:ce:
9e:e6:06:3a:b6:1f:5c:df:0c:56:3d:db:df:bb:b2:
e0:18:80:5c:7e:96:08:7e:5a:81:40:72:67:67:29:
ce:77:fe:cf:1a:dd:6c:c8:dd:58:ce:fe:68:f7:f5:
81:b1:c1:7c:aa:27:29:d8:a6:2f:62:54:af:c5:24:
9e:26:a4:fc:85:c4:ae:20:63:51:9e:a8:f6:32:a5:
77:f4:9a:65:0c:f8:fd:a3:d5:ac:b6:2d:b0:17:bd:
1a:b3:c5:dc:1f:96:33:2b:b0:33:d2:d8:3e:35:95:
45:73:2b:42:c5:91:fc:1e:73:2b:39:73:5a:50:0b:
40:78:ef:c9:8b:9d:f1:8e:f2:8c:02:95:ae:ec:c4:
d1:ff:40:20:2c:a4:69:5b:b9:b3:1f:84:8c:b0:23:
c0:f0:35:12:d0:a7:43:c0:d4:03:59:50:37:f8:a0:
87:70:db:68:7d:0f:c4:c1:57:49:a1:e2:63:cc:18:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:8F:11:52:48:0F:A9:4E:C5:77:85:1F:34:A9:82:95:C5:EF:C0
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:df:98:45:89:ad:c8:62:6c:0f:2d:06:22:80:b1:1a:2b:5b:
27:e2:73:57:fe:15:21:90:d1:da:77:0e:df:10:05:d0:64:22:
c5:7d:c4:a8:da:dd:2e:ad:69:70:0d:2d:5b:aa:15:8d:5f:3b:
61:1b:6d:14:a3:1d:b1:84:f6:13:45:d9:3e:e9:b3:f3:38:ad:
aa:0b:a2:86:92:48:93:b1:ff:dd:df:10:69:50:fd:9d:57:1e:
28:7c:da:ed:f8:02:17:0d:96:95:60:4c:5b:5f:cf:73:c1:4c:
49:00:2c:3a:c0:78:b4:69:4e:4d:86:e4:fc:c7:e5:4f:f0:9e:
65:dd:49:90:47:be:44:3a:0b:c6:bc:ec:ef:6a:52:04:34:b3:
dd:6e:d2:63:59:c0:42:99:19:ea:b7:c8:e9:f7:d3:bb:88:02:
b1:25:72:a0:18:df:8e:3b:a7:2d:96:ec:f4:ff:c3:bb:8e:0d:
be:90:67:6b:29:c9:31:10:ed:7e:b1:58:ec:e6:ae:d6:31:77:
e8:de:7c:7a:39:de:34:37:9c:f1:f0:0b:43:85:13:25:9f:27:
2a:73:e6:60:8a:47:69:82:50:5f:02:27:98:a1:ca:22:54:1a:
ef:35:00:a8:39:ae:9c:88:44:97:ff:ab:6d:4d:c8:de:e8:0a:
2e:cb:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:50 2025 by rpki-client