Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier: kEpv2m+0NtfJA/75mnAWxRRlyBIEzd0HHyQ6Fvj1atw=
Subject key identifier: 45:41:41:DE:C5:EC:AD:B6:83:CF:AE:B5:E5:01:88:47:82:78:8C:6F
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial: 0197B6A1B04217840F49CE203B964701BFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: zrtC40OjuurjuVixM8KZ0o9atYWXlUcQykYSRvmB1lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b0:42:17:84:0f:49:ce:20:3b:96:47:01:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=454141dec5ecadb683cfaeb5e501884782788c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:e8:a8:30:e4:d0:8d:3f:af:5a:58:56:d2:
01:81:5f:d7:aa:bb:20:68:64:ff:e7:e6:ce:a4:cc:
7c:d8:17:21:cb:5a:b7:d7:c8:af:ee:85:0a:70:b4:
35:22:89:ea:9f:7b:a7:0b:37:6b:07:f0:77:ce:0a:
7c:90:7a:e0:ff:c9:eb:c2:91:d8:19:87:0d:25:76:
d1:ce:d1:18:97:6f:6a:4e:33:46:56:1c:ec:cc:42:
3a:22:e6:90:33:5a:f0:97:8e:5e:e7:98:26:83:3a:
b8:14:e6:70:84:37:30:4e:23:05:89:62:d5:e2:94:
c2:f2:8d:f1:4b:f7:3b:4c:b9:4c:bb:4e:1e:aa:a1:
bb:8e:54:aa:1d:e0:be:95:73:85:23:26:7f:69:cd:
04:84:f4:05:6c:f5:55:16:49:26:6c:41:21:89:a2:
dc:46:74:42:ae:93:a5:fa:61:1b:e5:97:5e:d9:3f:
2b:22:17:b8:bb:63:77:ef:37:26:57:35:09:dd:2f:
bb:7e:7c:18:39:0a:3f:4d:4f:d4:35:a0:83:b5:b7:
9b:c7:84:87:1b:82:79:b7:ff:05:b3:ab:52:9c:8f:
c8:46:12:a1:a4:72:74:2d:fc:68:e8:cb:2a:f4:e0:
44:0c:2a:37:b2:9a:7e:2d:06:8e:31:9d:09:83:24:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:41:DE:C5:EC:AD:B6:83:CF:AE:B5:E5:01:88:47:82:78:8C:6F
X509v3 Authority Key Identifier:
keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:35:4a:7e:d9:05:5f:3e:67:a7:da:19:76:21:62:4f:9c:
15:cb:ab:33:d3:28:6c:32:4f:2e:5a:6a:ea:2c:03:ad:3c:1c:
44:d1:15:39:4d:da:c4:05:ed:2f:31:2e:d3:61:a5:f5:ca:4b:
1b:4f:0a:29:06:29:b8:fc:3c:53:ba:8c:8c:7a:be:b0:d2:25:
75:45:f8:90:64:6f:dc:e3:ee:2e:52:18:82:14:07:74:30:0b:
84:70:55:cb:b8:02:8a:55:37:25:05:84:28:5e:d0:e8:e1:26:
48:d8:af:a4:72:34:61:0e:d6:cf:bd:a8:49:27:b6:c8:e2:51:
07:5c:85:54:46:54:e8:14:9f:b4:28:7d:11:ae:c4:f6:b9:d8:
42:38:1f:0f:e9:c5:f8:45:ef:95:5c:56:19:d2:db:c9:53:8f:
fc:69:d0:97:70:e1:c6:10:94:86:03:aa:f8:db:35:5a:66:a8:
41:17:dd:7b:89:5f:27:5b:ce:85:cd:39:6d:fd:b7:b8:a1:5b:
f8:b2:3c:de:73:c6:57:4d:80:9a:d9:11:11:74:26:39:b9:ed:
1e:45:65:18:2c:e6:bf:b2:3e:e2:56:22:3e:a1:37:66:34:15:
3e:bb:4e:70:d9:91:c3:ca:b8:50:29:37:e7:da:b4:95:5d:73:
20:a8:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:58 2025 by rpki-client