Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: rQq8u9wQjNHoaM6y6NoT2d2IbojBm7XpFMU/jgRyZLA=
Subject key identifier: EF:79:80:9A:6B:64:EA:82:8F:61:2B:A8:35:88:75:CE:2F:14:88:C7
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0197B96A9F963F9A109FC6119C28C135FD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 10A7
Signing time: Sun 29 Jun 2025 02:01:01 +0000
Manifest this update: Sun 29 Jun 2025 02:01:01 +0000
Manifest next update: Mon 30 Jun 2025 02:01:01 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: lKBVFDTeAV5a3F17Ps5hles+GKZrdDOIZk01Bw/5e+8=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:9f:96:3f:9a:10:9f:c6:11:9c:28:c1:35:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jun 29 02:01:01 2025 GMT
Not After : Jun 30 02:01:01 2025 GMT
Subject: CN=ef79809a6b64ea828f612ba8358875ce2f1488c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:e1:21:61:86:07:4c:a2:91:8f:0c:5f:5a:
8a:ed:82:84:92:a8:8a:67:70:ef:c1:75:88:fc:0d:
81:7e:36:05:64:3a:6c:23:9a:57:96:9a:b4:34:d4:
24:14:82:e9:e2:e8:92:73:43:de:c1:bd:f3:47:2b:
54:ea:d4:6e:d0:93:36:8a:01:36:44:ae:35:69:9a:
e7:a0:27:c0:e0:07:6b:cf:6e:9f:63:8b:50:a8:b0:
fc:49:4e:e4:8f:b6:df:3a:99:c8:61:f6:4a:44:38:
07:19:35:5c:10:ba:3b:d4:b8:71:ee:9f:e9:0c:51:
b4:95:ba:1f:7d:f4:f2:a7:c3:2a:8b:1a:96:20:6b:
22:64:3d:71:98:e8:8a:2e:4c:2e:dc:5b:7e:de:c1:
64:b8:88:7e:25:43:50:62:51:65:9a:c0:70:00:f3:
f7:b2:25:73:b4:66:4c:87:07:7a:7f:77:7d:a2:1d:
45:9c:4e:b0:b7:39:0e:ad:9d:eb:88:06:73:27:69:
f8:67:cb:4d:51:29:a5:c2:36:a7:bc:3c:b7:c2:58:
71:fe:83:21:a3:43:d2:31:69:f4:a1:36:b6:87:0a:
c4:36:b4:c3:07:4a:40:2a:24:e2:bd:c0:c2:1b:18:
6d:e7:31:18:96:5f:53:4a:a3:b0:90:7f:31:34:41:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:80:9A:6B:64:EA:82:8F:61:2B:A8:35:88:75:CE:2F:14:88:C7
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:72:2c:78:e8:f5:22:c7:10:a6:24:30:ba:7e:8f:aa:10:
05:25:9a:57:e9:d3:31:86:7e:2d:6f:11:ea:4e:2a:4d:26:0a:
57:55:df:c1:90:0d:1d:fc:b1:b4:a4:b9:c3:10:ed:f2:eb:c3:
bc:88:d6:69:76:20:51:88:6b:cc:0c:29:93:94:1d:40:ca:af:
41:a0:3e:ba:37:c6:cd:61:88:29:c6:d0:01:26:94:39:17:33:
9b:16:0b:28:eb:0e:3c:73:cb:8b:ba:fc:54:28:24:62:f6:7a:
03:51:42:73:8a:97:82:a8:df:16:86:07:44:7d:e5:78:21:40:
74:f7:27:de:a3:38:82:a7:59:8d:c0:b1:f4:15:44:2f:26:c0:
f9:5f:be:96:69:2b:a4:98:57:b4:ae:a9:0e:32:8d:fa:7f:7f:
1a:0f:d8:e1:d0:b3:45:4d:6c:84:09:a1:05:99:3d:7a:5c:55:
a2:56:60:00:51:8a:59:36:28:ca:5d:08:13:76:9f:bd:cd:b2:
8e:93:82:0e:f0:ce:e5:fd:65:e9:b1:4a:0f:5c:f5:aa:ba:b9:
cd:c5:fa:b3:0c:5c:f2:c7:98:81:16:3a:15:20:1b:f2:7c:51:
74:26:d4:db:16:ab:10:eb:61:83:42:fd:87:95:29:08:53:ff:
b9:b4:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:33 2025 by rpki-client