Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: guif6cctCDkS/VAsB7A63zQfpvtbyPKUbLTzWAROk0Y=
Subject key identifier: 1D:F9:EE:1E:30:45:EA:3F:1A:06:A5:A1:D9:68:E8:55:2B:38:E9:3D
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 0197C493A1BBA86FF4A6D324E9E7711C5BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0E95
Signing time: Tue 01 Jul 2025 06:01:38 +0000
Manifest this update: Tue 01 Jul 2025 06:01:38 +0000
Manifest next update: Wed 02 Jul 2025 06:01:38 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: cychq4z4lqQwnYQt8VEU3PCRoYcsuvFzkyengyHYZo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:a1:bb:a8:6f:f4:a6:d3:24:e9:e7:71:1c:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Jul 1 06:01:38 2025 GMT
Not After : Jul 2 06:01:38 2025 GMT
Subject: CN=1df9ee1e3045ea3f1a06a5a1d968e8552b38e93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:7a:ee:c3:5a:0c:69:52:90:99:33:98:6a:
9a:4e:7f:a1:14:b0:1b:9f:20:24:91:35:58:3a:26:
94:38:c9:43:21:8e:57:89:eb:2d:d7:0e:b9:b5:0d:
58:b7:29:2a:9f:df:aa:e8:72:75:73:fe:05:39:25:
55:82:27:2b:d1:87:6a:18:cb:3e:f2:52:37:4c:30:
cb:a6:11:30:e8:50:f7:d8:75:08:87:66:41:64:63:
c5:32:85:4b:9a:bb:16:8e:7e:32:bc:b5:53:85:fc:
2d:10:d8:56:56:48:ef:7e:24:28:ac:35:fc:fe:97:
3f:ff:a7:72:4c:a8:85:c3:b4:95:da:42:85:ea:24:
ca:0d:4f:76:97:ef:06:c0:0d:9e:8d:2f:b8:3f:1e:
8f:16:df:0e:4b:9d:df:c1:61:ec:6f:56:db:91:d5:
9a:74:46:1a:fe:9d:c4:fd:7a:b4:a6:dd:5f:ec:43:
cc:86:d3:ff:de:76:ec:c4:c7:5d:43:2b:f9:19:d5:
e3:c8:0b:5f:18:84:64:6c:cd:ee:ef:34:69:32:c9:
1e:0b:dc:2b:84:d6:d1:d6:eb:a1:ad:a8:9a:3c:81:
0c:54:ea:b9:12:41:6f:58:64:fa:da:e4:fb:d0:16:
99:6d:08:f5:23:7c:3d:b7:65:b6:87:80:c4:29:8d:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:EE:1E:30:45:EA:3F:1A:06:A5:A1:D9:68:E8:55:2B:38:E9:3D
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:10:94:6b:15:90:0d:67:28:6a:c3:3a:6e:4a:df:29:d7:
79:30:c8:55:9d:c4:b3:31:a9:9b:e4:c4:37:e7:a2:c2:0f:7e:
17:41:86:7e:91:79:f0:42:81:3f:b7:89:b8:bf:85:a0:d8:2c:
2b:c5:a2:0d:d9:e8:4a:28:a9:4a:5a:07:64:b8:59:fd:dd:15:
cf:7f:b5:b2:95:b5:38:a4:aa:c6:08:26:df:fb:96:aa:80:91:
98:0d:c4:ed:c7:6b:0d:65:68:8d:31:41:e3:62:cc:75:a7:88:
f3:90:64:d5:b1:b2:fa:2f:96:24:5f:bf:a8:f7:77:a2:44:46:
f7:e7:ae:68:27:a4:83:ec:72:7b:9d:de:4d:09:1d:d4:3d:cf:
57:17:2c:9b:10:c4:a4:cf:1d:55:eb:db:d7:65:a0:91:f3:be:
ad:a3:7f:ca:53:d2:82:e1:ef:be:3c:17:fc:e9:fb:fc:42:7b:
d0:9b:7a:28:10:15:d7:ed:7a:f5:cd:ac:70:95:95:aa:16:35:
ee:fa:3d:40:89:b0:c4:de:08:b3:ae:12:90:fb:4a:a6:d5:57:
48:a3:f7:a9:37:7c:42:25:2f:ed:06:1a:2d:4f:e0:c6:e4:7c:
d2:62:b5:2d:6e:53:73:23:8a:6b:bf:b8:e3:60:ea:ea:d1:86:
ad:ff:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:29:08 2025 by rpki-client