Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: /nIm3UMsTHTphaejlZjfKgNM7I9CmozlJTiYWvTHXaM=
Subject key identifier: 9F:CC:1B:78:1A:B0:5C:1A:FC:09:76:19:C6:D9:AC:34:DC:72:BA:99
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 0197BB2273A54A3A70443C7A2BFA264658BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 0596
Signing time: Sun 29 Jun 2025 10:01:26 +0000
Manifest this update: Sun 29 Jun 2025 10:01:26 +0000
Manifest next update: Mon 30 Jun 2025 10:01:26 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: vHK8xEuq7QQZhrJb6UK1sB6C4BS7PEH1WpNpCMTHcAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:73:a5:4a:3a:70:44:3c:7a:2b:fa:26:46:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Jun 29 10:01:26 2025 GMT
Not After : Jun 30 10:01:26 2025 GMT
Subject: CN=9fcc1b781ab05c1afc097619c6d9ac34dc72ba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:b7:26:59:7e:b8:5b:4e:5a:b8:3e:ab:fb:
f1:d9:2b:e2:c5:e7:a8:b0:26:4f:84:3e:54:8d:ee:
4f:d1:b6:89:6c:f6:e2:f9:19:50:fe:27:cb:ab:70:
69:73:43:98:7a:95:e0:4f:39:65:c8:3d:9c:7e:a3:
8d:1e:7f:bd:78:c4:67:b0:d3:54:75:af:f1:7b:01:
d9:4d:ae:0a:f1:1d:d8:b6:15:ad:bb:6c:0c:1b:ae:
be:b9:60:6b:f6:2a:05:c0:f9:17:be:72:ae:f2:bd:
f1:17:8c:78:cc:be:87:71:4d:e4:17:02:e7:eb:58:
29:77:59:0c:26:3c:27:41:11:d4:d3:c8:c3:29:51:
ab:b3:86:e4:b3:95:f1:a7:23:96:5b:f4:d8:bf:3d:
9d:9f:c5:65:82:40:d1:48:db:44:b3:80:08:15:0b:
fd:f6:a0:bf:e2:2e:43:52:3f:83:2d:44:6e:30:8f:
ad:f5:42:7a:7e:bd:2f:6c:f5:d1:33:64:e8:7d:45:
2f:27:05:71:dd:11:c6:a1:54:53:f0:d8:23:73:c4:
df:a9:22:8b:d6:5c:39:15:86:a5:60:5d:75:87:cd:
77:2f:2f:f9:88:46:df:8f:a7:e7:9f:53:b3:77:0a:
db:d3:e0:b6:f3:db:81:a1:df:f7:40:07:e1:38:2c:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:1B:78:1A:B0:5C:1A:FC:09:76:19:C6:D9:AC:34:DC:72:BA:99
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cb:42:8b:e0:5a:e1:91:c1:e6:cc:0e:c5:ac:6e:df:3d:c2:
7e:9a:db:2f:63:1d:a8:40:86:68:08:0f:a3:7b:be:0f:57:20:
5a:29:b1:27:ed:48:dc:cc:3d:e8:9a:87:6f:f3:74:93:56:8f:
d7:84:f8:04:e0:d9:19:91:b5:19:f4:74:54:08:5a:7b:08:31:
0a:51:80:23:13:20:62:ec:11:f4:99:57:29:67:1a:17:db:f9:
dd:ac:30:92:4c:f8:3a:57:04:49:b9:1f:f4:ec:8f:fa:e4:d3:
b5:21:2b:bd:0b:81:1b:e5:16:1f:00:20:e4:5d:6d:9a:00:a7:
79:1a:b8:59:1d:04:e1:ed:c2:a2:8e:cb:1a:66:4e:a0:af:6c:
9e:3b:14:74:fd:2b:4e:d6:0a:37:c6:ea:fd:54:ae:b3:7d:f2:
6a:09:72:e2:5f:99:6e:f8:9d:a6:48:7e:a0:b5:7e:b7:2b:3d:
d2:fc:51:9d:a4:32:d0:d3:47:e3:66:5f:16:12:1d:bd:b1:44:
c0:1a:db:f1:7b:40:07:27:bc:f5:8b:d9:76:89:52:e9:1a:0f:
17:60:2f:48:3c:af:18:3a:97:03:db:90:e8:94:7b:bf:89:17:
3e:97:21:6a:63:9a:d3:0c:74:25:7b:73:c3:2e:92:d8:d8:c8:
c5:3b:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:23:53 2025 by rpki-client