Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: 01kZIQQ7rs5HRxmWT7E42F7Q8VVufpp3cVG2TecVfpM=
Subject key identifier: 29:F5:BA:A9:A4:4A:F6:30:8F:D8:68:11:2E:BF:B9:85:5C:5B:35:39
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0197B77C71B035ACB7C375808434F9DAE2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 01FE
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: HxeyxGl5do9FenSfwECfDjXLSAFrnUQpLcl+o67wbc4=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:71:b0:35:ac:b7:c3:75:80:84:34:f9:da:e2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=29f5baa9a44af6308fd868112ebfb9855c5b3539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:f4:14:f3:b4:62:33:8e:6b:41:1b:75:bb:
ea:e9:ac:29:7c:43:5f:af:ed:96:ee:67:e8:e3:e1:
dd:af:3d:84:90:7f:e8:9d:35:f6:7a:0d:a6:27:d1:
29:f8:f7:60:f8:f1:6b:6a:ea:8a:ec:80:8d:5c:a1:
ff:ab:e8:09:a5:35:22:2d:cc:33:af:c9:4a:a2:5a:
e3:34:05:81:35:19:ce:86:f2:c7:59:15:98:6f:6e:
22:48:80:35:09:bd:3c:d9:4a:dd:fe:f0:11:b8:bc:
93:42:2d:b8:5e:8f:4e:56:d9:41:d1:50:41:b7:3f:
41:53:57:5a:02:60:21:ab:5f:f7:47:14:ab:0b:3c:
84:26:22:43:6f:5b:2f:09:cf:cf:83:06:e4:0a:ec:
e4:10:ea:54:97:88:6e:74:b1:df:d9:6a:4b:f4:08:
a9:b7:b3:03:b9:54:29:35:18:e7:46:8c:c0:be:52:
ab:6b:b2:af:5c:1b:ec:a1:24:e8:53:87:39:da:2c:
9b:c6:17:fb:97:f9:34:48:1d:43:ba:b6:f2:fd:4d:
92:1d:c7:e6:27:9f:bf:11:12:0e:46:6e:27:da:21:
d8:9d:1b:20:4f:64:cf:ae:27:d2:6c:92:bc:b4:53:
d1:b6:ab:09:12:5a:46:50:13:a9:e0:49:80:9b:f2:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:BA:A9:A4:4A:F6:30:8F:D8:68:11:2E:BF:B9:85:5C:5B:35:39
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:d2:f3:9f:32:2e:bd:25:2f:8d:6f:08:b3:e8:3e:e7:79:
e6:fa:ae:85:ad:57:3e:13:4f:b6:d4:5d:b4:18:a3:74:2a:a1:
e6:58:59:f1:2f:f4:3c:48:e0:c1:2f:14:97:91:db:30:c2:f0:
05:53:c8:d3:14:fc:05:52:3b:f0:8a:84:33:50:16:cc:28:85:
da:4d:11:b5:93:32:f1:cc:78:d9:1f:e7:3d:d5:af:d0:57:98:
d2:05:b9:2d:c7:10:f5:6f:c3:33:ee:70:58:bb:ea:ab:35:d2:
5f:19:74:f5:4d:4a:5f:95:e2:9e:5f:c9:4a:59:a0:fc:e9:bc:
68:87:98:70:81:97:68:3b:75:ab:3d:c1:17:33:2a:94:c5:70:
22:1c:26:f1:76:a5:2b:3c:86:fa:0e:9e:9f:ec:49:4a:66:57:
c4:2f:7e:04:3d:43:3d:01:71:af:d9:74:8d:35:5f:5f:c1:54:
3b:80:d0:7b:60:40:63:91:68:77:10:61:23:cf:7c:2e:eb:23:
3c:e4:bf:f1:2c:07:9f:86:80:3d:35:e4:1d:f5:c5:57:34:b2:
8c:59:14:72:1f:04:a8:31:be:ae:b6:b3:ac:9e:f1:ae:8e:f1:
76:85:d1:42:4d:4e:f8:17:3a:6b:90:ca:90:e5:b5:73:33:39:
0a:fc:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:42 2025 by rpki-client