Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File: 7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier: n+gBgz+AFYIbam5WGoqrnpeOU9LefGak3qOnxVWWHjw=
Subject key identifier: A1:E1:51:8D:70:9D:CD:D3:01:3F:1E:29:7D:C9:27:0E:FC:DD:62:AD
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0197C79426ED457A97B80E17514C3B0C14B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 20:01:04 +0000
Manifest this update: Tue 01 Jul 2025 20:01:04 +0000
Manifest next update: Wed 02 Jul 2025 20:01:04 +0000
Files and hashes: 1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: 4y/6qI1jm23wJJGe5J5nx9lOIP+5ujkghf44hfBBFS4=)
2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:26:ed:45:7a:97:b8:0e:17:51:4c:3b:0c:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Jul 1 20:01:04 2025 GMT
Not After : Jul 2 20:01:04 2025 GMT
Subject: CN=a1e1518d709dcdd3013f1e297dc9270efcdd62ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:f0:ca:cc:fe:b1:4f:a9:f1:83:f5:cf:89:
dc:e4:ac:6a:cb:03:ab:74:2f:d8:8f:f5:e8:a6:2b:
ec:81:3b:e4:8c:7c:06:36:60:22:49:12:dc:43:58:
23:b5:79:a7:23:51:84:54:00:1d:ad:82:16:fc:9b:
b3:67:e4:59:3a:dc:a5:b2:d6:2c:4d:8d:39:b3:5f:
87:d3:b2:ab:4e:e5:88:34:32:28:ba:30:32:40:94:
47:fd:ab:3b:70:2a:a4:3e:8d:3a:8d:46:4a:e0:8b:
89:8a:21:fb:ad:74:c7:66:24:93:25:31:af:8a:a1:
f5:b4:da:b4:c6:4e:d8:02:70:1c:3f:d8:8f:db:25:
44:37:6e:4a:a4:1c:8f:1b:d9:3a:b1:9f:7f:6f:9b:
d2:3e:b3:bc:d6:d3:9d:2a:c2:ce:f0:77:81:91:fa:
0a:d7:0d:b8:85:7a:1c:6c:62:20:e5:dd:f3:f4:33:
70:95:e4:3f:99:c4:5b:71:60:06:89:91:75:bf:9f:
37:2a:ba:62:12:49:61:fc:17:44:7a:f6:52:12:7e:
27:d5:36:d0:0f:d7:9f:21:41:46:91:3d:12:af:98:
7e:b9:8f:9d:3b:d7:e3:70:6a:6b:2e:22:02:91:4f:
ce:af:db:7a:b0:05:62:83:f9:b4:db:37:a7:db:51:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E1:51:8D:70:9D:CD:D3:01:3F:1E:29:7D:C9:27:0E:FC:DD:62:AD
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:88:c9:35:59:4c:80:a4:69:ca:03:17:c2:81:e0:85:79:b5:
98:dd:60:d5:07:80:ce:ed:fe:26:d1:2c:bb:34:2f:1b:66:75:
bd:11:1c:9b:88:88:1c:25:c4:9c:9f:ba:3b:d3:fe:5f:df:ea:
1c:d5:88:2f:25:bd:ac:6d:c2:6b:26:ee:ad:13:b7:43:09:6c:
2e:47:6a:32:80:a1:80:92:90:65:33:45:4e:79:ad:01:6d:9f:
3d:0b:78:d2:95:ba:f2:ce:f7:50:38:eb:75:22:b2:40:d4:a5:
2c:65:e2:8f:f9:e6:3d:c5:4a:78:9d:4d:02:c6:02:fc:e0:9c:
91:57:31:a6:70:0e:d0:ff:58:3c:aa:d9:a7:ac:cc:a9:34:f1:
6d:50:23:34:d2:44:ab:e8:e4:c6:a6:aa:80:00:23:9e:35:11:
28:b2:fb:0c:c6:fc:1b:34:f5:f7:f4:3c:c6:c9:b8:25:79:af:
d7:c8:bf:7c:9d:f3:31:df:70:80:16:5b:af:03:08:bb:3d:dc:
ee:99:e1:ca:e3:64:6f:52:70:d6:a5:3f:58:4e:a2:0c:a4:28:
10:d2:12:f9:b1:5a:80:e5:6e:e2:32:e8:a8:44:2d:2e:cb:8d:
47:06:fe:39:8b:f7:a9:de:1a:a9:d5:80:d0:5f:76:be:af:d1:
29:e4:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:25:18 2025 by rpki-client