Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: BrWHIhCEG4UuxJtiwmRj3Wa5mjgoxET90ID8PSY5gIQ=
Subject key identifier: DE:E0:50:1C:7A:FE:97:C4:54:9A:85:DB:BC:39:A5:92:40:0C:04:6E
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 0198D660AAE5C89683C95046BD2A8983AB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 0206
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: KjAnXqk06+69iMaq7qgb2lEEj0bWxckHZyMRThVQ9jw=)
2: zUvaZsb6AAcGs5bszD-Bq4oB3BE.roa (hash: 2T5+Ho1mw99m4EQU26GsTeUM3Ju0dbCS0haz/aa2sBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:aa:e5:c8:96:83:c9:50:46:bd:2a:89:83:ab:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=dee0501c7afe97c4549a85dbbc39a592400c046e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:c6:cf:2a:cf:ae:b8:99:db:c9:23:f4:dc:
b0:bc:34:70:30:70:a2:87:76:9c:3d:97:e0:9e:ae:
d2:1d:6a:68:1c:91:9b:37:5f:7f:68:be:85:8e:ed:
b7:67:5c:5f:7c:17:9d:15:a4:22:46:30:e7:87:df:
a9:c1:1f:4b:4f:ed:27:29:98:e0:5d:aa:52:d8:22:
aa:20:6f:36:eb:f9:5b:6d:f2:6d:ad:be:34:41:a9:
6f:54:3d:c9:38:d2:40:4a:b7:e3:64:7e:26:b9:3e:
91:11:1b:2c:98:20:ca:fa:e6:9b:44:2d:bb:ea:e8:
24:10:7b:32:ea:e3:4f:ef:2c:41:d7:ca:b3:8a:de:
79:fb:e6:a8:74:98:bd:4c:cd:5e:ac:24:88:07:d4:
f9:9a:d5:5b:0e:a9:e5:1a:91:e5:7a:65:7a:10:8b:
fb:b1:88:ff:fa:15:13:c8:69:40:05:bf:7e:81:8f:
59:07:4d:41:b6:d5:dd:ff:84:29:d0:d6:79:b2:92:
2e:71:ab:ed:52:77:a6:2c:68:96:f5:40:c5:59:f8:
78:da:6e:0f:6c:ab:f2:84:cc:1e:ce:f8:89:d4:57:
b5:d5:95:7a:78:35:ad:4f:3c:10:79:8b:9d:d2:6f:
43:06:f1:16:28:3b:ca:4b:90:86:c2:61:b5:ee:95:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E0:50:1C:7A:FE:97:C4:54:9A:85:DB:BC:39:A5:92:40:0C:04:6E
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ff:20:8e:be:89:3d:dd:d5:fe:74:32:81:c3:c9:8a:a7:2c:
3a:5e:09:5b:a2:04:66:08:ac:70:98:e8:bc:64:f2:fe:f5:c7:
20:57:03:03:c9:16:6a:f2:a3:e4:72:98:50:a8:b8:8d:94:56:
d2:8c:6e:bb:05:ec:cc:c5:3d:eb:a6:39:07:5e:50:09:80:6f:
71:ac:6c:c3:53:e8:6a:fa:d2:94:e7:1b:64:9f:be:b6:bf:1e:
31:fb:10:4e:13:43:3a:e5:2f:ee:59:50:39:16:fd:3e:1c:28:
db:2c:1e:48:0b:54:d5:60:2b:48:63:cf:38:9c:fb:e5:82:7d:
ba:88:94:cd:24:ef:3d:c5:6c:05:08:9a:cd:1e:76:f2:97:45:
d7:b0:25:b3:fc:6c:ee:ef:19:c5:f5:93:ac:77:59:c8:7f:f8:
97:43:65:46:97:92:ff:3d:66:bd:1a:d8:6e:a3:e7:de:fd:c1:
c7:bf:a0:37:a3:f7:bb:8f:ce:fa:62:b9:9b:fa:a5:bf:c7:48:
7f:41:b1:79:0e:f0:c5:65:58:af:65:fc:be:a8:7b:1b:8a:3d:
34:f5:7d:86:c8:94:41:e2:21:0b:74:1e:27:35:1a:b6:29:ba:
67:9d:80:16:65:33:1f:5e:60:d1:05:b8:64:a7:61:66:3b:b1:
0f:e7:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:11 2025 by rpki-client