Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File: 7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier: gS2Thyl9aFMX8QWzAJOJYn95yYHo0R/r3Dx19D+4AEI=
Subject key identifier: AA:BA:0D:F7:C4:87:B1:02:1B:9F:7F:71:D3:75:6D:55:4B:F3:01:E8
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 0197B6D7872E3929291B3B0C4F8D942E2289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number: 010E
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: yc6cP8lJ0p4ujup/fUtRZNIEE4CeBqPJf0838n3uWVo=)
2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:87:2e:39:29:29:1b:3b:0c:4f:8d:94:2e:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=aaba0df7c487b1021b9f7f71d3756d554bf301e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:1b:9c:03:4a:89:cf:df:84:22:56:d3:64:
a4:a0:a7:e7:fc:ba:8d:51:18:ec:53:98:62:c6:6d:
0e:3b:c3:57:08:2c:41:76:fa:42:3a:d0:5e:7a:2c:
4e:ed:26:22:d0:86:28:ee:1e:f7:41:0e:30:e7:dd:
4f:23:f8:b0:12:f5:2c:a3:09:74:72:58:61:bf:0a:
1f:26:d5:ab:e0:95:5d:da:88:60:00:bd:d6:b0:04:
bb:29:93:ef:6c:ed:6e:d4:4e:f7:4a:fd:57:36:a7:
ca:4a:ff:6f:7d:69:41:f8:ee:3b:5d:d6:07:5c:c4:
2b:90:9b:30:8c:68:c6:0f:51:3b:5c:f9:b8:73:22:
1d:6d:26:a0:d6:71:96:79:77:88:2d:22:85:58:e6:
85:3a:5b:d2:3c:ba:6b:73:a3:7e:2a:1e:38:71:5b:
f0:ba:8b:36:38:a6:2e:fe:ff:8e:ec:d8:cb:5c:b3:
cf:65:1b:98:5b:23:76:29:bf:f7:e1:6d:30:b2:0f:
6a:a5:98:56:5f:0e:ac:19:38:ec:6c:cf:52:48:78:
c1:cb:4b:67:b9:26:ac:8f:17:81:ce:71:16:80:2a:
da:d5:10:ec:9e:18:e4:8c:e4:c6:07:d4:5b:94:a0:
7f:f9:85:8f:ca:99:99:02:fa:68:4c:44:d5:3c:6a:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:0D:F7:C4:87:B1:02:1B:9F:7F:71:D3:75:6D:55:4B:F3:01:E8
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8b:a5:66:ba:3c:94:d5:47:9c:24:bc:93:e8:c8:34:1f:4c:
cf:be:0b:a1:f7:89:27:da:87:10:7b:9f:9c:ca:e1:5a:39:dd:
e0:8e:3b:3c:16:d2:77:94:bc:67:5c:cb:02:34:84:b6:a4:7e:
59:63:0a:11:a9:76:83:78:3f:57:25:ae:24:37:b2:64:be:3e:
4a:a4:f2:2c:0b:7d:b7:34:f0:82:05:4e:a4:58:5a:05:b7:e0:
d7:d6:0d:9f:75:7b:df:c9:26:76:0c:88:4e:06:5d:b7:3a:80:
30:cd:7b:63:12:6f:0b:c1:86:4a:91:cf:c7:fb:19:d4:7a:7a:
8e:5d:56:be:08:04:af:38:dd:ea:c2:68:3e:b1:dd:c1:f5:b1:
d6:42:11:24:9b:28:9e:9d:4d:44:78:20:c3:af:56:ee:21:96:
e5:97:2e:ea:30:1b:be:e8:9c:fe:16:6e:48:4e:e5:7a:e2:67:
41:02:f5:96:3d:16:b7:df:fc:48:25:10:2d:12:52:7e:0e:7e:
37:e1:28:6a:88:af:8f:36:f2:da:b1:12:25:4a:ce:a8:27:d5:
34:6f:85:f6:a9:d3:ab:d6:78:6a:31:1a:7e:8b:b5:62:6d:4b:
6d:8d:02:47:be:c6:d7:9e:14:7c:f9:78:ad:0a:73:db:c3:f1:
e5:cc:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:35 2025 by rpki-client