Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: /8jnJZEE/grRy4pMvPkH8TfMCpF/xc3IIZWIRV1yBSg=
Subject key identifier: 04:44:6F:4B:66:44:EB:AD:1E:72:7B:AD:4D:78:88:89:B6:91:37:FE
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 0197B82163B39E481C783778C3F1212174B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: BB
Signing time: Sat 28 Jun 2025 20:01:25 +0000
Manifest this update: Sat 28 Jun 2025 20:01:25 +0000
Manifest next update: Sun 29 Jun 2025 20:01:25 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: THRIFNvbTaaa+ocsNOQabp1e+fJJC89KBxTIr64eOug=)
2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:63:b3:9e:48:1c:78:37:78:c3:f1:21:21:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Jun 28 20:01:25 2025 GMT
Not After : Jun 29 20:01:25 2025 GMT
Subject: CN=04446f4b6644ebad1e727bad4d788889b69137fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:ab:6f:97:10:ff:11:71:d3:1b:c2:5d:4b:
0a:10:4c:d9:ae:64:96:62:3d:da:d0:e6:b8:1a:00:
f2:24:21:97:b6:04:68:43:98:1f:43:b0:10:eb:cf:
25:2a:e2:0f:8d:38:f3:9d:c4:2e:5b:de:89:bc:92:
e3:96:c6:f2:db:73:a9:39:e8:60:a1:63:a8:1a:59:
e8:d2:eb:0c:6d:be:ff:c3:4c:9a:64:42:b2:08:ae:
4d:71:01:ac:e1:4e:60:c5:66:95:67:17:61:05:34:
48:a3:4e:28:07:48:81:99:ef:f5:24:0a:3e:19:ab:
28:d2:6c:28:f1:0f:cb:17:76:ad:77:0c:08:30:d6:
c1:fa:c0:45:5a:b2:3a:a7:2d:1d:d5:f6:18:a6:17:
b1:30:60:bb:49:a5:fd:9c:e9:45:a9:0b:66:30:c4:
4f:25:cf:e2:42:c1:41:26:ac:16:56:04:c4:60:f8:
70:77:90:0e:db:8f:94:b4:d6:77:33:b2:0f:6f:8e:
cf:89:9a:de:a0:82:19:9a:dd:74:2d:ab:20:6d:b3:
e7:1d:8a:6c:9e:a4:d4:2e:36:e3:90:1a:c7:a3:55:
59:22:77:14:2a:51:50:81:60:83:92:03:51:6c:e7:
06:20:a9:d9:80:c3:7c:c9:0d:34:86:03:a0:3a:90:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:6F:4B:66:44:EB:AD:1E:72:7B:AD:4D:78:88:89:B6:91:37:FE
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c0:29:cc:a4:1d:4c:01:43:29:21:0b:24:e9:6e:5a:82:68:
80:77:b3:bc:9c:53:85:23:08:1a:17:bc:89:b0:19:49:c3:98:
45:08:96:e0:84:2e:0f:88:34:9b:e5:8f:d6:8e:e9:cc:15:2f:
75:11:d6:c8:74:4f:11:cd:23:cb:f9:8b:9e:3e:e6:dc:60:41:
8a:f8:2a:79:d6:4c:cf:64:b4:e0:36:f2:ac:e9:c8:25:6b:5c:
b3:28:56:7b:c1:7a:50:b9:f9:77:32:34:6f:35:ba:10:91:6a:
cf:ec:40:8d:be:51:e4:20:7e:76:9e:cb:2e:31:1b:a8:a3:18:
67:e1:f2:aa:88:f5:e0:fd:0a:9e:f6:1d:e3:fb:e0:1d:8c:69:
f9:ee:45:01:5a:23:2b:c7:a4:f1:c1:69:1f:bc:8a:46:a9:ab:
ff:a6:c9:44:58:03:9a:3f:4a:b3:d7:f2:94:cf:41:95:32:79:
7e:98:e0:8d:ff:7b:14:ac:ba:14:8f:13:62:91:1b:24:e3:19:
74:ba:2d:07:c5:68:f4:15:58:49:8b:c9:43:a8:c3:b6:a6:27:
da:09:10:f4:49:d6:22:d9:7c:cf:ed:0e:21:dd:bc:40:b8:62:
f6:fd:a1:e4:2c:a5:7a:b8:76:82:a4:21:38:fa:11:f5:26:d3:
99:e5:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:56 2025 by rpki-client