Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier: TJjk3FFeTUeE8EIJw5nSEHvk0l60rsPnzarr0LsvTTU=
Subject key identifier: DD:FB:A6:6B:DB:1C:1B:B8:F4:ED:25:D6:BB:03:7F:1F:8E:BE:1D:2B
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer: /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial: 0197B8FCE6F021D4602A4E47393947712E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 00:01:11 +0000
Manifest this update: Sun 29 Jun 2025 00:01:11 +0000
Manifest next update: Mon 30 Jun 2025 00:01:11 +0000
Files and hashes: 1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: mmgu6vmNSBrIdEOHvKLebReeP4dpAmASTzZ6nM34kYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e6:f0:21:d4:60:2a:4e:47:39:39:47:71:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Validity
Not Before: Jun 29 00:01:11 2025 GMT
Not After : Jun 30 00:01:11 2025 GMT
Subject: CN=ddfba66bdb1c1bb8f4ed25d6bb037f1f8ebe1d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:17:58:6f:75:55:e1:93:33:af:d7:7f:d9:
06:e5:a8:37:dc:92:5d:ba:8a:4c:27:fc:bd:6e:14:
a1:f2:b6:3b:fe:3d:85:5e:0d:0f:d8:c5:57:ba:8e:
04:3b:98:0f:a2:2e:86:fe:11:f5:db:54:67:c3:43:
18:b1:a3:94:56:e7:eb:99:32:13:eb:a7:47:c6:d8:
7d:6f:45:da:4e:84:1e:32:a7:fb:6e:fb:4f:74:e0:
33:a9:0d:bd:d2:82:8b:84:2f:64:38:ce:86:75:ec:
42:7f:85:08:d0:1d:7c:20:2e:92:d4:de:67:25:63:
5a:e2:0e:81:7e:fa:e7:67:bd:05:0f:bf:71:f6:a6:
42:eb:29:80:60:21:70:d9:33:f0:6c:35:df:02:04:
f3:d0:fc:e4:c3:22:6c:5d:60:23:6a:01:5b:b9:41:
39:9b:f0:36:3f:ea:ae:a3:f2:ba:80:61:85:ff:8d:
c3:31:bc:9c:95:b2:a5:81:de:bd:14:a8:ad:4e:b4:
3a:69:0f:a9:b9:00:cc:63:3d:28:40:ce:9e:f0:9f:
7e:20:52:8f:56:17:47:61:3a:5a:4c:f9:41:42:a2:
99:ba:5e:6a:10:f3:47:03:ad:ff:eb:d2:5a:eb:e0:
64:15:a1:a7:12:b5:05:12:1c:35:57:06:e7:ba:9f:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:A6:6B:DB:1C:1B:B8:F4:ED:25:D6:BB:03:7F:1F:8E:BE:1D:2B
X509v3 Authority Key Identifier:
keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:9c:e5:67:28:c4:0d:35:4e:1e:5d:5c:9f:b8:27:9e:12:
fa:71:65:51:11:0e:01:19:5a:66:cb:36:dd:ba:e0:ee:27:f7:
e0:e9:6c:e8:cb:37:60:90:a0:7d:16:e1:c4:6a:af:52:e3:22:
49:17:d3:fb:91:6b:a6:1f:db:d2:6e:54:a2:89:65:b8:e2:c4:
4c:07:f0:84:af:6b:9e:94:d3:18:49:b8:39:d6:2e:6e:7a:26:
fd:7f:76:d2:d6:1f:99:9a:f5:bc:c3:96:32:2d:b5:c6:9a:2a:
7e:d2:54:c2:ac:e8:1c:26:dc:b9:d7:c9:57:2d:8a:0b:5e:24:
bd:25:cc:a0:92:a8:43:68:27:48:c8:c6:d2:34:11:5d:17:62:
7e:68:03:d6:b4:64:14:cd:7c:6f:01:ca:8a:df:12:26:01:1b:
4a:e2:09:76:d0:0a:8a:c8:0f:18:0f:9b:04:cd:af:d1:db:7b:
e9:1e:8b:9a:9e:0f:fe:e8:23:52:e9:62:c8:5f:cd:bc:2a:80:
75:51:ac:78:b2:68:5c:86:37:5d:cd:f4:bb:1e:84:af:62:c4:
81:1c:9f:7b:52:7d:dc:b4:c2:43:03:97:9c:be:c1:bb:cf:48:
cb:db:74:5e:ea:93:7d:e2:74:d4:ae:c5:2a:34:da:21:e5:53:
96:e0:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:05 2025 by rpki-client