Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File: 7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier: 30DKItXgCM8FVm8cpkXP4SmKqKxKGfxw4Ln5yhXErGQ=
Subject key identifier: 3F:1E:06:18:F9:44:7F:E6:0E:8D:B3:36:04:92:D6:CD:97:DF:29:E0
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer: /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial: 0197B6A0609596824B38ACB37ADDCED48629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number: 0FE3
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: erjyWc3ezzzQLOvKM2LaxkOxS20346b1k6yG6F8IE3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:60:95:96:82:4b:38:ac:b3:7a:dd:ce:d4:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=3f1e0618f9447fe60e8db3360492d6cd97df29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:dc:5b:b2:2f:80:36:0d:33:36:22:38:a7:
49:a0:f1:a3:a8:9d:58:14:e7:14:85:3c:a8:7b:7e:
0c:02:3e:39:f6:02:19:3b:01:02:4d:5f:02:19:38:
3f:78:8e:26:71:12:cb:94:ef:af:b8:20:28:39:f7:
22:f8:6b:fd:f6:22:5b:d4:54:ad:d3:aa:e9:a4:ba:
f8:8d:40:e2:4d:8b:3e:f5:24:a3:aa:25:a4:a1:dc:
d9:f4:ec:37:c0:d8:fa:53:c5:40:07:58:c5:ee:85:
b2:58:bd:15:82:b3:83:89:8c:b3:07:7e:e0:f2:f3:
0d:24:d9:60:e0:4a:a3:eb:0d:9f:6f:43:fe:5b:27:
6c:c8:d1:7a:77:8c:9f:01:df:6d:75:4d:5b:e1:87:
99:65:b6:d8:1d:62:7d:88:7d:07:d1:d6:f1:0e:22:
2a:32:e9:da:e9:6a:04:d1:21:85:02:05:81:4d:9f:
da:fc:c9:09:86:51:7d:58:ae:6f:be:b8:fd:b0:01:
70:fb:75:29:31:6d:28:43:45:c7:f3:b4:2b:a6:8b:
28:7c:9d:1e:0b:f1:82:89:da:56:a2:36:55:45:7f:
3b:c5:24:eb:a0:0f:7d:9d:bc:9c:c3:bb:13:bf:31:
d9:d6:76:2c:fd:dc:c3:9d:c9:56:62:e2:c8:97:af:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:06:18:F9:44:7F:E6:0E:8D:B3:36:04:92:D6:CD:97:DF:29:E0
X509v3 Authority Key Identifier:
keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ab:82:bd:93:4f:0c:98:54:8d:07:f0:05:af:44:90:3e:f8:
eb:aa:da:6c:2e:78:4e:eb:9e:ab:93:22:19:82:b9:25:49:ba:
c3:e1:9b:fa:ec:da:5b:e7:6c:e7:6e:6a:1f:71:4b:3b:f3:bd:
45:18:e1:5f:9a:7c:c6:9a:43:af:9a:86:52:a3:46:e1:61:98:
3b:0a:4b:76:f0:e9:31:7e:6a:eb:87:9b:27:eb:76:3c:4d:41:
dc:f4:0e:85:2e:78:33:33:e6:db:1d:00:69:27:fe:f3:c5:a1:
03:98:12:84:de:ca:b1:5b:8f:91:79:3f:5d:27:5b:ea:ad:a0:
41:f4:d1:a5:cf:5a:09:72:ba:24:ac:19:31:e6:13:57:94:a5:
a1:8b:bd:09:4f:c1:ea:56:24:03:ad:41:57:3c:5b:7a:a9:9b:
08:40:0d:1d:27:59:1f:9c:58:aa:ec:fc:9b:22:45:d4:35:6b:
05:55:71:ac:3b:42:fa:9c:20:af:a0:b5:fd:94:03:e7:95:c5:
68:5c:9b:4b:5f:11:b1:70:8f:8e:9a:3b:e2:8c:d7:6c:ce:73:
77:d7:f0:ba:1b:07:a1:03:dd:e6:64:ba:e5:c2:05:66:e2:53:
32:b1:c1:b6:b1:a6:0b:e1:80:ea:80:ef:35:7c:44:62:de:38:
bf:b5:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:46 2025 by rpki-client