Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: lN+xw6Fdgp8fpmpVggse7wrZ8SpBH12k7Xv/sh3r/9w=
Subject key identifier: B3:48:74:4B:30:22:41:97:13:F4:F8:4E:A7:E0:4B:FA:9E:02:34:C3
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 0197B5C4BCEEEDBB7AED0C9AC4CEB07FB06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 09:00:58 +0000
Manifest this update: Sat 28 Jun 2025 09:00:58 +0000
Manifest next update: Sun 29 Jun 2025 09:00:58 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: q2aAnYVB7TS8mXKeDgupxDfCXz5YmrfxYreo2U0Cdvk=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:bc:ee:ed:bb:7a:ed:0c:9a:c4:ce:b0:7f:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Jun 28 09:00:58 2025 GMT
Not After : Jun 29 09:00:58 2025 GMT
Subject: CN=b348744b3022419713f4f84ea7e04bfa9e0234c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:75:14:9e:6f:33:07:75:5c:07:7c:ae:db:
b7:aa:51:76:03:4f:c9:77:88:07:aa:de:cf:ef:27:
5f:48:25:f0:c6:1d:95:f7:f4:0a:4a:8e:70:e4:bf:
f1:51:ac:57:d4:d3:85:e3:e6:cf:98:b1:f1:34:7b:
7b:15:5e:a0:24:ac:f8:6e:b0:57:cd:69:08:cc:16:
b5:ae:29:bd:38:91:ea:bc:b1:20:21:f0:38:b2:99:
f4:65:ad:30:61:2a:05:cb:09:61:85:bc:95:93:70:
5d:4f:4b:d2:aa:7d:1c:92:2e:36:68:5c:63:49:28:
5a:2c:0c:49:67:f8:92:8f:74:2a:b3:3c:b7:fe:08:
10:b3:57:6c:e6:29:59:91:54:5d:f4:e3:f5:6c:db:
ac:52:74:84:55:f4:3d:58:d2:70:49:e5:83:97:5a:
4b:2e:f2:e7:d4:57:3e:aa:30:7a:1a:f7:dc:f8:d6:
39:85:a5:22:f1:75:91:ee:ed:8f:da:ce:c2:82:44:
86:2d:58:2a:03:65:f7:d0:9b:c6:65:93:9d:11:97:
87:2c:50:7e:c5:72:2c:d0:52:e1:96:0a:a0:63:2d:
81:62:0e:0f:ba:08:70:68:db:c9:27:24:22:27:b7:
db:f7:78:6f:30:88:8e:93:ff:90:5f:a8:f7:9c:e4:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:74:4B:30:22:41:97:13:F4:F8:4E:A7:E0:4B:FA:9E:02:34:C3
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:72:b5:bd:b0:23:6c:41:76:03:3b:10:7f:c0:10:bd:63:57:
6b:e7:30:49:0d:42:5e:08:0c:e0:45:b4:a7:48:9c:6a:60:8c:
be:55:a4:0a:24:17:e2:03:53:a6:2b:53:73:95:34:6c:ea:67:
90:6d:3e:2b:22:8c:43:a5:67:26:2e:88:59:ca:bb:a2:63:f2:
dc:b9:45:22:42:ab:b0:22:7e:c2:37:8c:6a:6d:fe:ca:52:de:
f4:48:d7:00:91:99:4e:09:3b:f4:ed:54:1d:76:b7:df:99:d7:
1e:c8:64:8a:82:d0:b8:2d:34:e7:23:2e:47:bb:b2:6b:10:8f:
99:55:d4:bd:5e:ec:a4:ac:10:63:82:ec:af:ef:20:4a:1b:b3:
47:13:95:0a:4d:12:6a:b5:5a:35:7a:c2:61:dc:7e:0d:22:4f:
93:7a:a2:89:3a:79:dd:8a:c7:62:54:f5:dc:a3:76:d4:a8:05:
93:d2:a0:af:cf:08:c0:df:e3:36:f5:bc:25:98:9f:dd:3d:7d:
9d:23:56:ce:d2:9c:3b:00:44:b1:a1:2f:f8:ee:4f:36:1f:c7:
19:36:66:13:c3:d5:a4:00:9b:32:29:61:55:ff:43:ee:23:83:
06:82:a6:61:d8:e3:11:cd:df:f4:76:61:8b:9b:c3:37:5e:da:
9e:dd:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:03 2025 by rpki-client