Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: iFcY8eM+T8j/AcHH/icJD+6DDjhb2BTKS02rqjCEs94=
Subject key identifier: 75:41:94:C1:CD:71:EA:37:35:12:22:DC:28:2E:0C:AA:C8:C5:34:F5
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0197CC157289E7894FB9D825E210C3F726B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 17:00:46 +0000
Manifest this update: Wed 02 Jul 2025 17:00:46 +0000
Manifest next update: Thu 03 Jul 2025 17:00:46 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: VNcOwwiPmvTX7BVAXwy3Q3Pr4Ct4vwkBa3zNelOZMyo=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:72:89:e7:89:4f:b9:d8:25:e2:10:c3:f7:26:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jul 2 17:00:46 2025 GMT
Not After : Jul 3 17:00:46 2025 GMT
Subject: CN=754194c1cd71ea37351222dc282e0caac8c534f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:ff:51:bd:34:ff:a7:30:6a:b1:39:0d:ee:
56:dc:01:1d:29:f4:26:ea:7c:90:97:15:0e:60:33:
2e:2e:fd:7c:76:5c:93:9a:d0:0d:2e:bf:2f:e7:8e:
c5:5b:98:0e:41:ad:c0:bd:87:e8:12:17:93:57:1c:
32:42:88:3f:67:0e:b2:77:11:81:22:ce:ec:0e:bc:
5b:27:ab:7f:c6:08:de:93:22:56:b2:3c:95:36:51:
73:5e:10:2f:7c:8e:6c:26:c5:3d:78:b8:51:75:b1:
50:72:7e:7f:52:32:3c:1f:b5:79:c7:00:d1:12:aa:
d8:37:8d:db:d8:28:81:e1:2b:8a:14:1d:51:ca:a3:
a7:15:7e:90:2f:44:41:0c:ad:aa:35:3a:ea:5e:0b:
cd:66:1f:26:72:69:62:48:3a:57:37:90:64:90:d1:
da:8b:11:7a:d6:f7:32:fd:09:0b:64:85:14:3d:27:
03:f7:f3:d7:93:3e:1a:29:44:19:14:03:b6:10:15:
2b:c2:ff:e4:57:8a:f7:38:5a:0d:78:53:a3:e6:dd:
66:2a:60:a8:8a:14:2b:36:fb:9b:35:22:94:0f:1b:
ad:39:51:c4:6f:ab:4b:38:72:cb:b8:e6:6e:5e:a3:
73:ce:4b:ef:16:dc:d4:ea:e7:21:26:e2:49:45:7d:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:94:C1:CD:71:EA:37:35:12:22:DC:28:2E:0C:AA:C8:C5:34:F5
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ea:39:27:49:90:74:c0:03:b6:a1:6e:0b:03:0a:f1:25:2c:
2e:7d:f8:2c:0b:64:f5:d6:d4:2f:e2:36:ac:6f:15:6a:07:4c:
93:92:b1:1b:c5:36:d2:93:7b:34:19:dd:ae:3b:b0:c6:c8:5b:
77:ba:77:84:2b:81:39:21:8b:7d:c6:97:6f:91:e5:c3:d7:26:
38:2d:0e:ff:70:5c:96:70:af:66:1b:7e:ce:fd:65:68:7c:a9:
f0:72:49:eb:25:ee:2c:3a:ad:0e:6e:35:f5:4b:4b:56:dd:18:
40:8e:e1:94:43:6e:85:aa:3c:6a:e9:47:e0:84:50:a4:36:11:
85:63:03:20:15:d4:cc:af:43:13:26:ae:77:e2:9a:73:ba:16:
2e:09:1a:30:1a:40:48:e1:da:56:15:b8:cb:00:41:9f:32:b6:
4e:db:de:ed:e8:df:b9:8b:19:c3:cd:47:88:85:8d:31:11:29:
7a:2a:78:07:fd:6d:52:3b:4b:53:d4:54:fb:a1:af:19:d0:b5:
e6:7f:52:dd:f9:e7:d7:90:05:dd:b5:e8:86:a8:d2:fd:a0:6e:
c8:f9:2e:c0:60:6d:4b:9c:2c:05:eb:59:01:1f:e8:78:67:da:
b0:b0:66:f2:d2:09:19:9f:e9:5c:c3:79:b8:61:8a:b4:d1:5b:
1e:14:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:34:23 2025 by rpki-client