Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: NAZ5QUd4f8fcopeBSqJv7SNNWIloJ3LRBHKuUy5eW3U=
Subject key identifier: 4C:59:A2:67:4E:89:AE:67:63:D1:64:DD:3C:00:41:80:83:A3:06:B3
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 0198D515775AAB8F99303B2A21FDD9EBC03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0628
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: 5xSS5GsdggsYH9h40N0aGY8Xx99DMmXbP4SFD7lgyWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:77:5a:ab:8f:99:30:3b:2a:21:fd:d9:eb:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=4c59a2674e89ae6763d164dd3c00418083a306b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:08:5f:13:f5:11:c2:1b:4a:33:b0:91:80:
e2:55:94:72:4b:ad:aa:d1:54:d7:0d:61:fd:46:29:
23:d5:43:95:8d:f7:6f:b0:58:97:90:2e:9c:5f:ac:
a5:53:8f:5c:91:41:9a:03:a0:ef:d3:21:ea:10:e0:
27:cb:ed:73:7d:97:ee:20:4b:b5:5f:14:75:0e:04:
e8:57:64:01:cb:a1:1a:f1:5f:0d:a6:8c:e5:2d:bd:
d8:2c:30:8e:59:8e:a4:c0:d0:f5:f4:ae:e5:56:d8:
51:1c:df:6e:35:a4:6e:07:02:28:04:9b:a6:56:8b:
ed:7e:56:19:ec:f9:f1:52:53:69:f8:0e:fa:28:c9:
b1:53:d1:34:b7:ad:4f:70:6e:28:17:f0:4b:01:38:
3d:ae:99:82:e3:80:3b:63:09:f9:2c:d8:b4:ed:c3:
4a:52:2b:4c:54:68:ca:1a:34:52:3e:7d:4c:ed:59:
18:5f:a0:82:ac:bb:87:fa:2c:81:8d:21:81:41:9b:
e0:a0:fb:ca:03:80:35:cf:67:1a:79:0a:52:57:87:
14:3e:ac:10:b6:c4:6e:d4:19:9a:a3:87:fa:a0:5a:
eb:27:81:ec:a7:4f:f0:56:6d:b2:4f:3d:ba:0f:d7:
0c:89:f3:d6:d3:34:56:00:62:60:0e:08:41:14:ee:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:59:A2:67:4E:89:AE:67:63:D1:64:DD:3C:00:41:80:83:A3:06:B3
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:56:85:92:e0:5f:2c:22:a6:1f:6a:5d:57:4a:20:7b:a8:
b9:49:0d:14:29:0e:db:19:e8:51:5e:f1:41:41:46:8c:79:fb:
46:0e:d8:19:a9:6f:58:f2:fc:8b:a4:c5:d5:4a:2d:41:e8:25:
25:68:14:35:e3:45:e6:b7:b0:5a:f6:ed:3c:25:ba:aa:55:24:
76:9b:f2:2f:87:e6:64:72:82:9d:77:a7:9a:94:ba:a0:65:77:
95:dc:f1:9d:59:1d:3a:fd:7b:f4:e7:b4:f6:08:d1:0d:c5:f6:
29:24:67:b7:9d:4c:ff:b6:ec:3c:8c:2c:93:c8:14:a6:07:d7:
da:f3:24:cd:6f:e7:15:cb:32:20:3f:89:94:e1:1f:66:5d:98:
58:60:74:4d:db:a4:a5:e5:9c:37:2e:be:0a:02:b8:33:42:fa:
7e:93:4c:4c:e4:4f:4b:8b:bb:4e:e0:cd:19:f2:f7:15:86:60:
48:94:b7:12:0d:18:05:5d:ee:95:db:cc:b3:37:68:d4:a2:80:
ce:68:07:bd:92:9e:5b:44:55:e6:cd:87:3b:fa:2e:ba:46:4e:
99:4b:2e:7b:b1:dc:2f:fb:72:09:8a:90:a7:fb:cc:bc:5b:66:
54:7e:f4:11:39:e8:c6:1f:9a:c3:af:bd:f6:70:9e:a7:e2:f7:
b4:74:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:26 2025 by rpki-client