Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: L7J1Uw+7zHg4xYq+NTZoPZyZWc1bX47dOUiR5L1pfxc=
Subject key identifier: 8F:9F:96:61:B8:8C:3C:8C:72:64:61:06:66:81:C4:8D:FC:85:35:0B
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 0197BFA46093D771851BD367E063B76676C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 0196
Signing time: Mon 30 Jun 2025 07:01:50 +0000
Manifest this update: Mon 30 Jun 2025 07:01:50 +0000
Manifest next update: Tue 01 Jul 2025 07:01:50 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: TODt10GPT0Nq0kXSJbDkqg7a3grkci4v8Tcs54G4/xQ=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a4:60:93:d7:71:85:1b:d3:67:e0:63:b7:66:76:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Jun 30 07:01:50 2025 GMT
Not After : Jul 1 07:01:50 2025 GMT
Subject: CN=8f9f9661b88c3c8c726461066681c48dfc85350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:44:64:78:6a:ab:48:e6:f1:d2:61:7b:a6:
9b:b5:f0:02:c6:94:5b:0c:d2:1f:48:ee:0d:4a:4e:
aa:5e:e4:72:ac:ec:04:c3:7a:82:3e:c2:e6:36:74:
b0:76:13:4e:db:69:0c:cb:46:b8:c0:18:aa:cd:20:
d6:12:f2:1f:61:1d:57:6c:73:f8:9e:7b:24:87:6e:
9e:2a:14:bf:1a:74:cf:0b:6b:bf:c6:1f:e7:79:e9:
f0:64:c3:55:98:0e:9c:f2:63:66:03:2a:2a:4a:9e:
a2:a5:6b:ab:be:c8:30:43:d1:7e:a0:f3:06:e9:71:
41:6b:92:42:70:8e:83:57:60:8d:4f:7c:e4:13:fa:
9c:19:ad:1a:9b:b0:a3:fd:54:1d:c8:10:82:85:0e:
47:c2:a5:b0:37:ec:7e:2f:52:8c:74:f0:f9:56:f5:
b0:ed:33:b0:70:54:77:aa:a7:cb:fe:07:4a:3f:03:
03:1d:f9:23:3b:39:96:94:ed:df:77:20:ee:5a:70:
90:6e:2b:9e:22:2f:0c:39:ed:9d:93:e2:6f:ca:28:
9d:a3:fa:a7:12:f2:cc:1d:23:5b:24:fe:3b:8c:3b:
5a:29:f4:7b:30:5f:57:72:de:a3:42:fd:11:24:51:
f2:27:4c:ef:4b:7b:a2:61:e7:e6:45:bd:44:1f:56:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:96:61:B8:8C:3C:8C:72:64:61:06:66:81:C4:8D:FC:85:35:0B
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:e0:f5:b9:11:ea:d4:49:ab:3e:0d:4d:41:97:4c:c5:b2:
65:ca:2e:36:4d:c8:41:9e:7d:3b:2c:12:d1:1f:a4:61:a6:ff:
ad:7e:f3:26:ec:98:1f:d6:3a:31:bb:55:ca:e6:63:3c:0e:88:
40:8a:e8:99:93:93:0c:74:b3:c0:73:04:82:1a:17:e4:2b:69:
85:20:ef:cc:fa:56:26:a9:5f:8c:06:2c:8c:53:96:ce:4c:69:
44:11:73:3e:26:90:13:6a:7f:b2:29:92:7b:6c:0b:4e:3f:c9:
8c:d2:3f:da:ce:c2:4f:99:0f:51:54:10:6f:c4:d1:da:45:e1:
b8:fa:e8:be:0b:2c:86:09:b9:dc:da:c9:e8:27:62:51:b7:7b:
b7:d4:b3:57:78:c8:57:df:b7:bd:d4:5a:2a:78:9c:c5:d5:3f:
09:f8:f9:a6:29:6b:97:91:e2:2b:07:d1:56:11:78:97:cf:78:
fc:bf:4e:8d:db:fb:61:48:59:0a:61:18:1b:e1:f9:b5:aa:8e:
57:cd:77:ba:a2:ec:8b:42:48:00:2c:d5:01:da:56:f6:f5:ad:
c3:5e:ff:93:30:a2:6f:53:c0:c0:cf:83:fc:ad:dd:3c:59:28:
24:20:74:0a:48:ae:82:71:1a:d7:4b:c8:73:fa:df:6b:a5:e6:
15:a4:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:46:30 2025 by rpki-client