Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File: e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier: pCjhUlQZczBU9syuxh+ABfNq0gOlwSGV35UHfFH3jN8=
Subject key identifier: A1:9E:90:DC:C6:86:FE:52:6A:F3:DC:FD:C9:FE:6D:D5:FC:9D:73:2F
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer: /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial: 0197CC4C708303A8BCA028F5DE66C449B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 18:00:50 +0000
Manifest this update: Wed 02 Jul 2025 18:00:50 +0000
Manifest next update: Thu 03 Jul 2025 18:00:50 +0000
Files and hashes: 1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: 7b88Caenxhao9RF9rBaLj3IVXf5Y6FUU+0FqSzKjrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:70:83:03:a8:bc:a0:28:f5:de:66:c4:49:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Validity
Not Before: Jul 2 18:00:50 2025 GMT
Not After : Jul 3 18:00:50 2025 GMT
Subject: CN=a19e90dcc686fe526af3dcfdc9fe6dd5fc9d732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:7a:84:24:95:d2:00:ad:18:7b:58:4a:60:
35:5b:19:15:99:cc:2a:9d:f1:28:9e:48:9d:40:d0:
1f:af:e7:6c:c8:21:33:82:e2:e2:fe:d3:f9:6a:b7:
af:2b:7c:ad:85:6b:bc:cc:76:fa:ba:01:cc:9b:46:
86:0f:4d:1c:c1:ad:02:33:95:08:cb:68:95:41:33:
60:e7:80:44:1f:1a:24:ed:e4:fd:12:85:a9:1b:a2:
01:6e:0a:96:59:cf:1f:b7:2e:4d:48:c8:f9:4b:6d:
77:00:5e:ec:99:96:ed:e1:d2:ea:42:23:84:41:5f:
ed:11:07:04:e4:9c:46:b5:cd:de:bf:78:3c:28:ea:
33:25:f0:cb:0f:b5:62:85:68:43:41:0d:de:9a:7c:
3b:ee:67:69:85:de:8a:44:30:f2:c3:d9:9a:f4:ec:
08:63:86:18:34:b3:20:f1:f1:c5:86:5c:5d:c1:ed:
cf:c0:68:c8:fa:dc:45:f8:72:66:87:12:ba:18:ea:
d7:6f:91:54:5a:94:2c:10:c6:88:ba:a6:3a:de:ad:
01:98:c8:a1:d1:34:a5:46:93:51:1e:e4:7a:cf:f3:
ee:1a:23:f7:f0:f1:2f:f3:6f:51:2d:89:3c:a1:cd:
68:bb:5b:9e:34:cc:32:3f:ff:54:1c:06:14:6a:ca:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:90:DC:C6:86:FE:52:6A:F3:DC:FD:C9:FE:6D:D5:FC:9D:73:2F
X509v3 Authority Key Identifier:
keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4f:34:a6:2c:b2:a0:d4:75:9c:2a:a9:c9:e9:9f:d6:54:f7:
1c:42:0e:4d:53:d0:e9:3a:9c:83:10:af:f6:ee:1b:01:9a:e2:
a6:73:01:ff:a2:37:d2:ed:78:4c:26:4f:77:ef:4d:26:6b:0c:
01:b1:e8:9f:dd:33:8f:3c:92:20:59:a5:ce:41:ec:60:f8:8a:
f5:61:a9:75:85:eb:ca:86:55:a3:ae:d2:80:08:b3:b8:6e:a8:
3b:e5:a1:87:44:6f:53:a7:c2:12:ab:63:6a:e7:21:84:6d:dd:
34:b5:8a:26:dc:47:34:2b:59:f2:8d:65:bb:e8:ff:98:88:2d:
b0:e4:34:09:d3:53:a1:78:e4:6c:86:e8:c6:18:8c:98:bd:00:
c9:b4:9e:0a:cd:72:7d:02:a1:43:d1:2c:bb:c6:82:b2:7b:5d:
94:e3:65:cb:dd:dc:46:e7:cb:b3:6c:20:0a:b8:1b:10:32:ec:
4a:56:2f:ca:e1:87:e9:82:dc:09:79:7a:34:bb:d5:d7:77:28:
5b:0e:8a:19:f4:6a:62:0e:2a:3d:96:43:c5:e7:f3:45:7d:66:
d7:d1:b1:b6:75:5a:a7:ad:72:e6:8a:6a:f0:dd:e9:47:16:ea:
2c:b0:32:98:d1:34:fc:d4:ce:e8:38:05:e9:89:be:88:03:02:
3b:6e:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:18:24 2025 by rpki-client