Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: wDsAIhfcxMufk+pyeQ+FObkOG54b7Yl22PE3GuoCfo4=
Subject key identifier: D7:C5:1D:CE:69:58:44:E4:2F:C2:12:29:2F:51:05:8E:14:42:F7:97
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 0197BA0F985A9F4677C0F1C3221158653446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 025B
Signing time: Sun 29 Jun 2025 05:01:13 +0000
Manifest this update: Sun 29 Jun 2025 05:01:13 +0000
Manifest next update: Mon 30 Jun 2025 05:01:13 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: Fvum2mLVeSwjzul7HLVrWdYhUCuGbBUsJRwSBi/kZJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:98:5a:9f:46:77:c0:f1:c3:22:11:58:65:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Jun 29 05:01:13 2025 GMT
Not After : Jun 30 05:01:13 2025 GMT
Subject: CN=d7c51dce695844e42fc212292f51058e1442f797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:cb:9e:1e:9a:db:96:19:4c:fe:a9:05:95:
4d:26:19:72:6c:d8:1c:6e:2d:c3:d9:d5:ab:24:b5:
02:3c:89:4a:c0:24:4d:53:ec:d0:30:b6:cd:cb:0f:
9f:7c:6a:84:52:8f:56:20:c5:57:1b:04:0d:05:17:
e7:71:52:43:c2:c6:e9:7c:17:8a:a5:64:4c:ce:e9:
18:99:d9:54:6e:b7:b3:83:41:ac:45:9e:0a:e5:b6:
b2:44:c7:61:13:d7:c8:ad:73:e3:ba:34:d0:69:85:
54:a6:36:1a:e0:a9:46:89:96:c9:b7:ee:1b:cd:b6:
45:02:92:d9:91:ff:ca:63:5c:ce:08:40:57:f9:9e:
db:a8:e9:d7:14:53:eb:92:d5:e5:46:a8:b9:f4:b9:
e8:87:06:ef:73:05:f8:61:55:29:81:65:2d:35:43:
ad:53:de:3a:2c:eb:61:b4:48:e3:04:80:e4:b8:75:
7e:16:62:24:8d:34:15:92:e8:73:07:45:c9:d0:e5:
7e:af:72:5c:a7:5e:8c:86:4b:aa:a1:0e:3b:3e:14:
4f:93:41:87:26:31:c7:1e:0a:ff:41:ef:37:0d:2c:
69:0c:1c:55:76:7a:21:2d:72:18:af:6b:88:66:32:
1d:41:c9:a0:73:07:9e:08:69:fb:00:22:d8:6d:b9:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:1D:CE:69:58:44:E4:2F:C2:12:29:2F:51:05:8E:14:42:F7:97
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:cf:25:a8:e7:1a:e6:d5:39:9a:fc:88:ee:86:f7:c2:53:
07:45:18:88:95:f9:a1:8a:f2:5c:22:85:55:19:67:b1:32:20:
37:2c:99:6a:3f:04:1c:52:db:36:e7:7c:8e:36:f1:67:bd:25:
22:ba:69:75:d0:b9:63:75:3b:f8:a0:07:66:ce:d2:36:a6:e9:
38:f1:8e:2a:da:b1:c8:ae:59:84:99:87:b5:c2:13:07:bc:4e:
79:34:56:57:62:3b:0b:97:94:2c:ab:a5:0b:ae:9a:2c:e0:36:
f7:b8:4f:ba:66:00:d0:12:d7:a1:9e:06:29:b3:9b:dd:8a:ba:
ca:8e:44:15:c1:60:3e:5b:6d:e7:36:d6:ce:0b:8a:55:4e:95:
7f:9f:46:1c:f1:d4:d4:24:a1:fd:40:2b:b7:a4:b8:72:a7:41:
b3:ca:b5:9d:6c:c6:34:ec:f0:70:32:b3:ad:ab:5d:00:6f:1b:
01:f6:c5:3c:b0:84:07:70:c1:b9:d0:2c:c7:f3:64:b5:9e:c3:
b8:79:81:ec:10:cf:4f:80:d4:cd:11:01:38:5a:8e:4c:0b:02:
c4:7e:c8:15:8c:7b:53:fe:a3:89:03:b8:6f:ad:65:eb:8b:49:
66:2f:da:40:6b:bf:15:49:4c:a0:b0:9f:7d:b0:cf:d3:da:34:
de:3a:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:17:54 2025 by rpki-client