Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: tLuDKv8stYRi7hjMi5H4lUOAbhWpmTjdNGAEyaeoMMo=
Subject key identifier: ED:7A:46:45:9F:29:D2:F2:7C:D1:4D:DF:E4:CF:71:4F:82:0E:B5:5F
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 0197B70E9B2CFE4024F54337E34B13412809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0A37
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: JANHPYDKTHoeFqube23quYWE3mUy1SK2bHD8XZrspxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9b:2c:fe:40:24:f5:43:37:e3:4b:13:41:28:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=ed7a46459f29d2f27cd14ddfe4cf714f820eb55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:c5:c6:05:32:b0:83:0b:88:9a:5c:16:e8:
7e:0c:11:a5:a6:93:90:9c:2d:f6:15:2c:38:e9:9b:
e9:50:ec:c6:c7:59:76:7f:ef:06:5b:82:cd:5f:c9:
0e:9c:2d:4a:bc:bf:33:eb:81:08:1b:ef:b4:fb:87:
2b:f9:74:a4:7f:58:ae:a5:b9:ec:94:c5:8f:ca:ac:
68:31:ef:ef:e7:b5:1d:f7:39:3a:b1:f2:5a:26:7f:
82:df:25:e4:3c:e1:1f:75:f4:1a:3f:27:dd:49:dc:
37:82:33:51:0c:68:12:07:cd:52:f6:ab:f3:1a:79:
6e:44:20:20:e0:c4:9a:e1:5e:b9:d3:01:73:e0:b5:
58:42:b7:72:90:d0:a7:a8:e4:31:0c:98:45:ef:cb:
83:7e:2e:b0:b5:51:c6:5a:6a:41:cf:1e:07:32:07:
23:63:06:18:d0:4f:74:2b:20:b1:cc:53:3f:23:b6:
08:96:89:23:f2:9c:aa:29:df:51:40:d9:5c:96:dc:
7b:90:75:14:cf:47:9d:3e:8b:c2:14:ed:5b:41:9e:
51:54:94:ea:1e:33:60:5d:dc:cc:7e:ee:1b:15:6b:
bc:fe:27:0d:53:bc:29:08:32:b9:f2:0e:ef:b7:e7:
1e:87:04:bd:bc:0f:7a:71:82:71:62:a4:bd:67:4f:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:46:45:9F:29:D2:F2:7C:D1:4D:DF:E4:CF:71:4F:82:0E:B5:5F
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:37:6e:57:fd:65:36:d7:14:f4:14:15:3f:7f:42:ac:b2:
64:69:ff:11:58:7d:fe:93:b7:d6:7a:86:b0:7a:07:17:9d:74:
f5:b9:25:d7:e5:7c:52:42:57:e9:a9:70:7c:66:83:de:c1:51:
e5:ff:68:e5:da:de:be:14:d5:50:7c:a3:4b:cd:c3:e9:f4:8a:
ae:35:9b:a2:19:bd:db:88:bb:0d:22:78:01:8e:bb:2a:57:ef:
2a:a9:0b:ac:f7:2b:72:31:20:1d:0a:ac:39:80:68:23:f5:7c:
82:f8:31:85:14:48:1f:e7:40:8c:ed:8a:ac:1b:42:f4:e9:ad:
28:d1:8c:5b:3c:d3:ae:41:02:c6:f9:7e:dd:e3:3a:e2:32:96:
fd:e8:8c:13:1a:63:4e:b3:3a:4e:f8:f4:5e:51:1d:79:43:86:
e4:cd:95:e7:84:e2:58:61:03:5e:97:92:d4:57:e9:f1:6f:72:
b0:a2:24:ea:df:0a:08:b2:98:bc:ab:e3:28:9c:25:16:42:a5:
c4:25:b5:2f:b0:98:65:59:8f:87:e6:8b:6b:86:05:0c:df:c7:
50:ca:e4:3d:d8:55:d0:96:50:84:a4:9a:47:b2:95:f4:ca:95:
75:65:cf:83:69:26:d1:e0:3b:31:48:a7:38:e5:67:a9:ca:9c:
2f:89:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:42 2025 by rpki-client