Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: jyYucyN7G3P6XkmRZLGyjxvwOYOW6ZIu3DBynbR8dYQ=
Subject key identifier: 77:52:EC:AF:CD:61:1F:D3:2E:A6:50:91:5B:63:33:C3:3C:CC:E3:3C
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 0197C42511794488951C1E77B0B47760858E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 0642
Signing time: Tue 01 Jul 2025 04:00:53 +0000
Manifest this update: Tue 01 Jul 2025 04:00:53 +0000
Manifest next update: Wed 02 Jul 2025 04:00:53 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: ns6ZPkJzyOdPzMqrg84tXfYoaWebYsvg0aN93YAt9CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:11:79:44:88:95:1c:1e:77:b0:b4:77:60:85:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Jul 1 04:00:53 2025 GMT
Not After : Jul 2 04:00:53 2025 GMT
Subject: CN=7752ecafcd611fd32ea650915b6333c33ccce33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:49:8f:c8:05:fc:de:9d:d0:b1:1c:6b:73:
6c:0e:f6:9f:bd:c3:cc:bb:39:e5:be:7d:b4:c0:5b:
01:af:9f:43:f5:48:4f:75:a9:30:47:8e:e9:c1:d5:
c1:39:c9:d6:42:bb:d3:32:b0:eb:88:b9:a2:f0:f1:
ce:33:77:1c:1f:d7:18:fe:32:c0:6a:45:4b:14:22:
af:f4:3c:68:55:99:78:ab:a1:bd:65:c4:98:e3:5c:
d3:de:6a:8c:bc:7d:72:75:48:6a:b0:29:de:13:ac:
16:61:49:62:c3:ff:b5:82:62:77:e8:89:9a:2c:65:
f5:fe:ca:0e:08:ce:40:50:b9:e5:8f:7b:42:0e:3b:
f2:84:74:46:21:5d:59:65:24:2a:68:e3:ec:01:b9:
fe:e6:1a:ac:12:58:d6:cd:1c:9c:89:e3:24:7a:b8:
06:5c:87:01:6c:10:78:76:a3:17:90:67:49:db:50:
50:02:de:1c:0f:b9:89:48:d6:4c:98:b5:8d:eb:ff:
09:ad:7d:b3:53:49:fa:96:ad:95:11:80:5f:55:fd:
d5:6c:b2:4e:74:e8:7d:2a:df:a5:d5:55:8b:05:44:
5b:6f:d0:7f:14:01:78:59:d7:bb:3b:c1:3f:85:18:
dd:1a:e1:60:c4:13:a9:68:cb:4f:63:fd:a4:38:6e:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:EC:AF:CD:61:1F:D3:2E:A6:50:91:5B:63:33:C3:3C:CC:E3:3C
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5d:40:bb:a0:29:5e:bd:68:b3:9d:71:d1:87:bd:14:24:86:
87:1a:54:a6:4f:ed:0e:0c:81:56:1b:d2:95:e9:bc:3a:d4:70:
66:49:24:90:9a:75:cd:4b:9a:53:97:9d:45:5d:16:ca:be:d8:
44:c0:c0:1e:c4:e4:c0:0c:9c:bb:6d:73:05:21:93:f1:e5:a5:
4a:dc:7e:ec:bd:d7:68:9a:39:a7:db:54:a7:94:c7:15:ca:ce:
df:b9:bf:c9:df:d2:9b:7e:c3:46:6b:ef:c4:c3:69:1d:fe:87:
69:3c:41:46:7c:85:1b:da:93:95:89:3c:a7:8a:e2:62:59:b8:
95:b1:40:ad:e6:1e:b9:04:81:6b:f0:0d:49:09:96:95:fc:e7:
c1:a5:f6:9d:85:a5:3f:a0:a8:32:01:15:d7:15:7b:0d:97:5a:
49:c9:82:52:62:e7:29:b3:0b:c0:33:72:d5:de:26:9b:ac:af:
68:d3:cd:50:a5:27:ac:e0:d4:7d:86:f0:13:e9:42:32:dd:68:
82:89:69:0f:b3:40:50:29:63:9a:8b:ed:b3:e7:f8:35:3c:32:
63:cb:d4:cc:9e:73:d6:2f:30:ae:12:db:df:fa:91:1c:06:f1:
1e:25:dd:13:d8:a6:43:03:81:56:1c:00:61:c0:a6:39:be:9f:
36:c0:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:58:47 2025 by rpki-client