Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier: L1OhYxMa5M7oMcuPaWHikHafNeP+c4qXDd205T/6FvU=
Subject key identifier: F6:24:10:85:99:94:E2:B6:62:83:9B:20:96:33:CA:13:26:0D:CE:89
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 0197B77C4FE4EFE260DE2B74C14E22C1AE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: A/ZOZkbYRdhFxA0FrW87Ncb5A59hYzLiLzIB3pPLZDQ=)
2: g_JNH7gOaAOj_YX1GFwMG5EgUSc.roa (hash: eApqZboLkQTa+wGga+MD4NN9O/ClMD233tgVbWU1Quc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4f:e4:ef:e2:60:de:2b:74:c1:4e:22:c1:ae:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=f62410859994e2b662839b209633ca13260dce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:c1:2d:84:8e:c1:b4:58:21:a6:34:4f:d3:
36:e3:ac:19:a0:d5:f4:e3:2e:39:d4:2f:1c:98:f1:
55:0b:2e:5d:75:6c:2b:be:8c:76:9b:bb:8d:ff:a2:
48:c8:3a:4c:53:da:cb:8b:d1:02:9c:78:e9:26:7c:
af:13:d6:cf:bf:db:11:16:7d:49:92:d9:8b:cc:66:
2c:34:75:74:06:a0:20:99:64:83:4b:7c:ce:b5:b5:
bb:3f:d6:7b:5f:e3:cc:87:41:76:31:99:c6:2d:18:
cf:23:60:76:df:0c:76:7b:2c:8b:60:62:63:c3:0c:
fa:3b:94:77:91:d9:5e:9f:02:b1:66:c5:b9:18:9e:
28:7c:23:12:81:93:f2:c9:b8:e2:4b:06:85:6f:e5:
41:40:7d:cc:83:22:a0:6b:07:ab:cd:d3:6c:8a:ae:
21:da:21:71:ec:79:f5:3b:75:34:73:40:ba:5d:34:
c8:67:18:88:4e:d5:d2:d8:af:f6:66:5d:68:fa:8e:
cc:0a:0f:59:4b:27:fd:dc:2e:31:d4:ba:29:69:60:
8e:79:04:95:2c:45:5f:32:bf:78:e1:e2:f0:a4:d6:
d5:1b:9d:ce:b6:90:b4:d8:5d:cd:ca:73:1b:20:91:
f7:57:45:fc:d3:af:00:5b:55:23:ea:4a:4b:cf:95:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:10:85:99:94:E2:B6:62:83:9B:20:96:33:CA:13:26:0D:CE:89
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6c:4b:a7:17:e8:97:9c:f5:86:bd:2a:05:7f:a7:a0:76:65:
16:dc:62:f4:77:bb:8d:f6:9a:08:5b:29:91:41:56:5a:5f:82:
b0:b1:9c:f2:ba:b2:30:a8:ff:fe:97:e9:1a:20:56:fd:c6:99:
3b:b4:ae:9b:cb:3a:ee:f5:1b:1b:e0:4f:18:ca:28:70:ea:84:
c3:dc:2f:88:ad:c8:18:a4:e2:50:66:df:1b:0b:af:1d:74:29:
12:15:de:e8:ef:15:4d:4c:b8:b3:63:bd:51:2f:14:60:59:71:
fe:0f:ca:06:a3:7f:12:a2:64:cf:79:f0:94:5a:f5:c2:1d:92:
66:20:20:a0:0a:f8:56:1f:46:8e:a3:a0:86:37:11:09:05:69:
ee:89:a2:c3:6c:0d:5a:c1:03:19:6a:3d:79:95:ea:0c:1d:f7:
8b:f2:dc:41:5c:4c:f1:8b:c2:bb:23:6c:ce:f1:f1:15:f0:76:
b9:63:ee:7d:37:dd:a6:89:81:28:92:75:dc:34:15:2f:e9:e0:
26:79:5c:5e:b0:a8:39:6d:c4:fc:fc:aa:0f:86:b1:98:a2:da:
7e:29:e3:53:0b:7c:c0:87:1b:22:53:0d:d0:00:da:ab:bb:58:
7b:0b:4d:55:ca:bf:a1:e4:87:fd:d3:4a:19:c1:03:cb:7d:f8:
cf:64:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:28 2025 by rpki-client