Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: CbDX1WnXT0EXM+OQRm1D88NZOYlGfbfrY5O5G0lNfCc=
Subject key identifier: E9:84:00:32:7D:7A:31:1D:0E:20:AC:36:E8:FF:34:BC:BF:1D:62:73
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 0197B88F8854FB8BDEF5CDC0A8DF08FCCADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 0171
Signing time: Sat 28 Jun 2025 22:01:43 +0000
Manifest this update: Sat 28 Jun 2025 22:01:43 +0000
Manifest next update: Sun 29 Jun 2025 22:01:43 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: Sh6kZYNKIglGETHA3Yd9dMYEJDURiMdJvi+OTyvE4gA=)
2: QSjkZq8_AJ0B8g7dlzd0nA4JsWQ.roa (hash: YMcvfk9S0D5BI+lBDXlsaUm2v/yIEV2HtkKOAQ1Y0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:88:54:fb:8b:de:f5:cd:c0:a8:df:08:fc:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Jun 28 22:01:43 2025 GMT
Not After : Jun 29 22:01:43 2025 GMT
Subject: CN=e98400327d7a311d0e20ac36e8ff34bcbf1d6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:29:22:8b:c1:28:8c:83:0c:4c:e5:76:08:
4b:f1:bc:26:4b:b9:50:4e:6d:70:81:a3:cf:b0:de:
17:84:74:bc:a4:a4:fe:ef:f9:72:fb:00:65:68:4f:
05:9b:30:50:12:b9:81:21:70:81:9c:aa:20:7d:c2:
21:70:69:c2:ef:7d:e2:ca:c3:fc:82:55:07:1c:21:
53:a4:d3:66:f5:51:58:af:e8:fc:fe:5f:70:f3:99:
cd:a6:c8:28:33:60:b3:b5:c7:5a:40:bd:cb:04:a2:
e3:5f:44:6c:7d:74:8e:84:c1:8a:57:2e:3d:ca:85:
15:97:88:f8:6d:59:c3:a5:dc:05:0a:bc:32:67:de:
52:44:79:2d:62:b1:90:03:8d:62:67:b0:9f:42:0f:
39:86:31:cd:c3:50:b0:1f:49:90:a2:25:09:2e:00:
9b:40:b1:46:f7:d8:2e:32:7a:5a:65:34:05:33:e1:
f1:82:34:59:57:2e:8b:81:9e:78:f4:fa:e0:e2:57:
83:18:c4:5b:64:35:b9:e2:c4:2a:eb:2c:1a:f3:39:
8d:55:84:33:b1:90:da:2e:b1:d8:62:02:b4:31:56:
de:55:23:1b:97:aa:98:cc:24:97:ff:ad:62:d6:d3:
26:b2:c6:b5:72:01:f9:b1:d9:d3:21:4e:80:68:91:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:00:32:7D:7A:31:1D:0E:20:AC:36:E8:FF:34:BC:BF:1D:62:73
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:34:e7:6c:c2:4b:24:51:e0:d0:32:47:7b:95:9f:01:fe:3a:
92:e1:2c:3a:d0:58:8a:c1:c9:9c:6c:ff:a9:f9:52:4a:92:83:
be:84:14:a4:59:fb:1b:ab:fc:27:e6:8a:03:1a:10:81:9b:f3:
2c:f0:ea:8a:1d:ea:b3:44:fa:0f:94:a1:f2:84:f1:be:91:51:
f7:9d:69:44:07:a2:85:ca:2a:1d:1d:27:25:ec:2f:48:f7:8a:
1f:e9:aa:ec:bc:26:fb:c9:40:76:f2:d7:36:f8:ad:9e:aa:9d:
7b:8e:64:cd:38:ac:6b:78:f4:87:b0:b9:a3:73:14:e4:0e:9a:
9b:2d:f5:5f:67:ab:45:1b:fa:12:7e:a5:1d:ce:29:54:cb:b2:
6c:ad:84:2d:8a:c0:47:f9:b5:05:1c:97:cf:df:d9:23:85:ff:
95:62:ce:b1:ce:a7:b0:b4:30:28:09:41:50:ad:9e:94:b2:05:
fa:68:d8:8a:d9:b4:58:eb:0a:bb:21:71:76:85:0e:24:90:32:
14:49:9d:86:83:c7:e3:73:87:fc:ae:26:18:6c:40:8f:e5:20:
7a:e1:90:58:d0:a4:38:a7:07:ab:fe:5d:6f:54:34:06:0d:9a:
ac:3f:ea:30:ec:f2:9f:88:04:37:45:dc:b0:84:09:f4:82:e0:
ff:b8:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:17 2025 by rpki-client