Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
File: De-ewcAwfGBzzor4PwmWjKt6u-8.mft (raw, json)
Hash identifier: wKdj9vDNa3EBEvOdbwtjdGyTrMlmkT3tPAQ1D9aKY0s=
Subject key identifier: 6A:88:61:54:88:CC:37:3C:0C:BB:B9:C1:41:AF:93:80:F5:EE:CA:11
Authority key identifier: 0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
Certificate issuer: /CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Certificate serial: 0197B745B9C299B6BECE753BB897D84A0582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
Manifest number: 10F7
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: De-ewcAwfGBzzor4PwmWjKt6u-8.crl (hash: BmUwEpza8K0uQLOSaMAoegxlc/a2YqLZI19bdE9EnWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b9:c2:99:b6:be:ce:75:3b:b8:97:d8:4a:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0def9ec1c0307c6073ce8af83f09968cab7abbef
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=6a88615488cc373c0cbbb9c141af9380f5eeca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:04:3b:61:dc:2f:e8:46:87:cb:c7:0b:dd:
85:c4:38:8a:16:58:79:a3:6f:0a:9c:a6:50:d0:03:
81:17:f9:32:67:08:61:00:92:e3:4b:52:74:fa:f0:
3c:19:59:8e:2b:67:0d:33:bb:4b:39:3f:0b:7f:ec:
40:a3:59:8e:14:96:a5:2a:fd:d0:db:41:0f:82:c4:
bd:09:7f:6e:93:24:9b:fa:5f:95:9c:ab:e7:79:f9:
bc:d1:73:48:56:fa:68:92:9e:b3:a0:86:a6:5a:a9:
c3:03:1e:2c:15:d7:11:e9:1c:82:42:e5:82:8e:54:
46:0f:e4:2a:47:ec:c2:75:03:18:76:c0:c3:c4:be:
bd:f5:34:69:d0:ab:52:bc:14:a2:00:f0:c6:e9:90:
a7:2b:df:8b:0f:64:cb:37:04:17:e8:ab:89:08:39:
51:e3:90:1e:10:fc:91:ec:bf:c3:bf:a6:cf:8a:37:
09:40:89:46:68:07:5a:b8:75:36:df:62:65:90:c6:
70:8a:2f:47:8a:38:9f:4c:b6:a4:70:25:66:c8:7c:
a9:95:64:f5:88:8d:01:35:cc:92:e2:56:5a:62:ff:
9b:88:4c:a9:62:65:5d:ce:59:15:69:42:ac:da:0a:
84:3b:06:25:16:cb:d9:f9:3c:e8:c6:58:33:21:28:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:61:54:88:CC:37:3C:0C:BB:B9:C1:41:AF:93:80:F5:EE:CA:11
X509v3 Authority Key Identifier:
keyid:0D:EF:9E:C1:C0:30:7C:60:73:CE:8A:F8:3F:09:96:8C:AB:7A:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De-ewcAwfGBzzor4PwmWjKt6u-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9f77a4-3bbb-43dd-bbc0-7c935b5d972e/1/De-ewcAwfGBzzor4PwmWjKt6u-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:b9:74:a1:0a:39:d9:3a:11:74:d5:a8:9b:d5:d1:00:a2:
2b:2e:89:b4:ab:4c:ca:37:ac:4f:bd:64:a6:a8:3b:43:ba:46:
d7:c4:4e:9e:5c:f2:d4:3d:3c:15:03:83:d6:a8:77:85:c0:a5:
84:d1:0a:6e:f3:f3:e9:80:df:96:29:83:19:9d:cb:11:a0:89:
05:55:5f:27:e9:42:c0:49:85:9d:3e:b2:68:32:4c:71:89:5b:
b3:c4:bc:34:c7:ba:b5:12:ec:6d:98:85:93:eb:1b:6d:0b:16:
49:7d:01:8e:c3:34:9d:f2:02:51:7f:fd:f5:03:26:d5:86:57:
b7:0c:e0:a6:1c:57:14:d7:24:99:11:57:98:e9:48:a8:85:80:
77:84:d6:ea:d8:3d:ea:db:71:c8:9d:98:9a:09:d6:28:71:4e:
83:55:74:c0:f1:5f:e4:b7:f4:9f:68:b2:56:4d:67:00:76:2b:
1c:02:60:6d:0f:3d:e2:ee:cd:bf:bc:66:06:96:87:89:de:e1:
c9:55:53:f8:87:5b:91:f1:2e:eb:0f:7e:0d:62:d0:e3:cb:7c:
fd:17:40:c9:15:7a:72:ea:ed:80:eb:a6:1a:bf:d2:56:0d:cf:
9d:43:c5:e1:10:13:9d:cc:e7:24:ab:cf:bf:1d:b3:5b:14:25:
f2:d2:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:42 2025 by rpki-client