Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: 5hFvQHSJUNVYIh/U0AAFK0DXYMH5IW4SnOPOUHi2mqQ=
Subject key identifier: 8F:02:A3:E6:5C:83:D0:44:05:BD:F2:10:84:63:64:D7:92:A1:F0:C1
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 0197B77C17ED8FCC1B2916FB359B449154FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: ybNO9dPROye3evnPyjAMr+Nnhmub5j1BZdebKjI9mrs=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:17:ed:8f:cc:1b:29:16:fb:35:9b:44:91:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=8f02a3e65c83d04405bdf210846364d792a1f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:72:16:d7:73:9e:2a:2f:53:3a:a6:1f:00:
09:3a:3c:88:e8:d6:4d:b7:cb:bf:ce:04:8b:a9:52:
46:67:dc:00:ba:ad:be:70:48:fa:8a:bd:22:05:ac:
25:d0:1e:85:09:41:b7:e5:a3:c9:39:b5:63:10:e3:
ee:d9:5b:2f:9c:17:d5:51:eb:f4:1e:31:fa:26:e7:
da:c9:0d:1b:fb:21:b8:a1:a4:c9:19:fa:c9:11:96:
16:c2:c7:7d:2c:6f:ba:d7:b5:db:8d:93:6f:35:88:
43:88:0d:c2:d5:9a:94:b6:be:18:21:76:94:f0:c9:
72:95:b1:79:00:82:b2:23:2e:ad:58:da:fb:c3:57:
29:3b:01:8c:eb:2a:d7:59:ef:33:7c:08:48:09:57:
2e:5a:70:c3:ec:bb:d2:85:80:17:b8:b3:53:2d:c8:
31:5e:e0:6d:72:fe:e4:fe:be:e7:5d:be:2e:53:79:
75:d4:f1:21:73:ed:e4:a6:8c:04:3a:66:79:1e:0b:
49:f4:98:51:65:7a:fa:66:cd:41:77:98:c3:13:bd:
74:84:a2:5f:28:9a:c5:00:4e:d5:29:5e:01:d0:54:
eb:e1:80:8b:b4:75:18:b6:40:0f:fa:a1:c4:00:7c:
ed:2c:4f:0e:76:af:3c:7e:c8:83:da:18:15:1d:cd:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:A3:E6:5C:83:D0:44:05:BD:F2:10:84:63:64:D7:92:A1:F0:C1
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e5:d3:5e:a6:bc:41:96:85:88:3b:45:4d:b2:28:b8:2d:52:
16:16:1f:a6:9b:e7:11:8b:84:3c:7f:02:98:0d:22:20:7e:2e:
bf:0d:05:d6:95:6c:e2:47:a1:68:0c:c3:14:fb:e8:f5:c5:de:
b7:3b:5a:d6:0a:3a:4d:6c:40:d7:f3:0c:62:18:d0:a3:e6:1b:
c3:a6:39:68:45:a3:a9:5b:c6:b1:e1:0f:d2:25:de:2c:f6:89:
a6:8b:d7:9c:e1:c4:8d:fc:1f:58:1f:6c:03:a0:c6:ec:ea:a6:
af:3f:d3:a9:ba:24:1b:46:26:7a:24:dd:91:eb:ad:f3:93:65:
67:e4:9b:0b:68:a2:24:b7:ad:b1:f7:97:f6:72:9e:94:99:88:
cd:09:62:63:03:40:0c:a3:36:a3:f8:fb:bf:d7:15:4c:85:da:
e6:0e:4f:e3:c6:dc:a5:2f:19:78:f4:1a:20:b0:eb:c4:ec:1f:
d2:e9:8f:8f:1f:d7:53:d4:62:1d:ea:6b:68:42:fa:b5:89:89:
d4:ae:9f:94:69:da:09:a3:f6:89:72:30:f2:75:25:f4:68:35:
69:6b:e4:ae:69:77:88:9c:b0:bf:75:4b:8d:ea:82:1a:ce:14:
fa:ec:8c:de:2f:b6:4f:a9:a0:f2:f3:e0:97:a9:57:31:a4:62:
da:39:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:57 2025 by rpki-client