Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: BJRJ8DzDdMK8cht4duPulsxVrJcEWztl0CjwvLY4AHs=
Subject key identifier: 2F:5E:1D:03:86:78:3A:BA:32:87:33:A4:36:49:F7:22:41:FA:9D:0B
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 0197CACC12B6A11D59755F995C2C11A7E8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 05E0
Signing time: Wed 02 Jul 2025 11:01:01 +0000
Manifest this update: Wed 02 Jul 2025 11:01:01 +0000
Manifest next update: Thu 03 Jul 2025 11:01:01 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: N3jSzEcM6SuT/QGwUbzWomxITSpCkVrrMuFBGg8p8EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:12:b6:a1:1d:59:75:5f:99:5c:2c:11:a7:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Jul 2 11:01:01 2025 GMT
Not After : Jul 3 11:01:01 2025 GMT
Subject: CN=2f5e1d0386783aba328733a43649f72241fa9d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:10:b3:27:6c:16:9e:89:77:c7:df:cb:8b:
ab:70:cc:0c:b3:fa:39:b1:b4:6c:f9:95:cc:3b:c6:
57:9a:d3:07:c4:60:14:1c:ca:52:27:f2:68:71:9f:
55:f8:83:35:f9:77:b8:18:3f:f4:98:68:a4:e6:83:
5b:77:16:bf:b7:12:6f:ee:f6:7c:99:99:0b:28:57:
79:ad:f5:dc:2c:81:d3:c7:03:81:68:77:65:04:a6:
d8:81:ed:7e:92:62:00:0b:26:69:ca:ba:34:89:78:
9c:3f:be:d3:40:32:49:97:94:84:64:0d:4a:4f:38:
20:f0:f6:04:9f:4a:fb:c9:b2:03:63:16:cf:4f:cd:
3b:66:c7:10:af:49:45:43:bb:1d:3e:e6:c3:32:7e:
d9:63:b0:07:cc:42:a0:b4:e8:f6:c8:ca:fa:02:8a:
2c:56:f4:55:4b:50:7b:8d:d6:1f:72:9a:f0:7e:1d:
c6:09:2b:44:93:28:bb:7e:0d:e2:8b:4b:63:61:14:
b4:89:e5:91:72:26:71:3c:f6:de:0b:de:23:8a:f9:
fc:2c:b4:4c:1e:ac:b2:7d:ba:2b:58:ff:3b:90:67:
49:09:db:c7:ba:57:4f:b4:23:d4:5c:13:c6:ae:61:
fb:62:6c:48:6b:ff:01:7a:89:52:60:5c:33:fc:c0:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5E:1D:03:86:78:3A:BA:32:87:33:A4:36:49:F7:22:41:FA:9D:0B
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:01:89:06:6d:53:08:e2:c4:8c:96:fe:5e:29:67:f7:24:
4c:13:96:c1:47:ed:28:79:28:c3:57:0b:ca:4f:db:61:6d:31:
25:22:da:ed:fd:b7:24:72:e1:5e:4e:f5:96:33:a0:5b:bc:fb:
a9:9b:44:cc:2f:aa:f1:60:72:6f:40:19:bc:27:11:4e:dd:83:
73:76:5e:63:54:d5:10:ec:a5:f0:fb:9f:3c:ce:97:37:bf:b8:
e3:bc:60:62:7b:21:45:d1:04:20:42:2a:2b:72:13:ef:d9:ac:
30:12:27:5e:2a:11:2f:18:41:a8:81:16:7b:99:46:1d:68:93:
e0:20:e9:83:83:1a:ef:89:e9:ec:6c:e0:b4:de:7a:2e:66:1c:
b0:a3:7b:f1:96:f1:92:1d:6a:51:0a:53:01:28:b2:97:6e:ae:
ad:b0:a1:83:62:c6:3b:a6:61:14:51:23:99:60:03:13:1f:76:
f8:7e:64:18:7e:d8:6d:19:5a:79:03:92:f2:a1:f4:a2:29:45:
d4:3c:8d:81:2c:37:7a:9c:d1:6f:0d:1b:57:38:d7:86:b8:a7:
9f:e3:07:b4:ad:77:96:fc:c4:16:f6:ae:21:37:5a:ee:86:b9:
ad:de:b6:a6:e8:43:54:fa:ab:01:32:3b:4d:d3:cb:fd:3e:ad:
7d:87:a3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:07:42 2025 by rpki-client