Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
File: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft (raw, json)
Hash identifier: 7SsB1cRE4ZKdIvdEM4I5UBj/cBSsVbNA9UbKu/bR9fc=
Subject key identifier: 78:AA:F8:BB:DA:7E:E8:FE:30:13:D1:B2:31:E4:82:2E:E0:69:6B:FD
Authority key identifier: B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
Certificate issuer: /CN=b50edfc96d2b61788689533142969e65566512aa
Certificate serial: 0198D516435CFE615634B6B99159FAB0A99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
Manifest number: 15C7
Signing time: Sat 23 Aug 2025 04:01:02 +0000
Manifest this update: Sat 23 Aug 2025 04:01:02 +0000
Manifest next update: Sun 24 Aug 2025 04:01:02 +0000
Files and hashes: 1: tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl (hash: GBN68RzXDeYEZgto8mhmgOxDDLYal8lP55e0HPh9pyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:43:5c:fe:61:56:34:b6:b9:91:59:fa:b0:a9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50edfc96d2b61788689533142969e65566512aa
Validity
Not Before: Aug 23 04:01:02 2025 GMT
Not After : Aug 24 04:01:02 2025 GMT
Subject: CN=78aaf8bbda7ee8fe3013d1b231e4822ee0696bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:b9:fa:d7:68:2b:e4:c0:a5:86:90:64:3b:
98:84:5c:d3:65:f0:a4:5f:1e:17:9c:27:7e:a1:f4:
fa:a2:fa:15:c8:21:f7:81:4e:c1:38:cb:5e:af:c2:
de:d2:da:16:3e:9c:f9:85:5d:99:06:3a:f9:89:86:
2d:6b:90:39:dc:63:a6:99:d6:0c:65:ff:21:06:d5:
8d:52:d1:26:48:bb:12:a6:30:87:89:2a:4f:d4:f8:
22:44:a5:c3:87:ea:ab:a5:76:93:8f:f4:c6:17:02:
5f:5d:68:67:64:e0:e8:16:c3:84:51:8f:1e:4a:75:
63:51:8c:60:23:62:2d:07:0f:ea:9c:43:3b:63:02:
05:15:82:77:54:cd:e6:c6:ab:a1:c4:cc:0f:7d:5e:
76:24:ed:e1:0b:58:e1:99:73:0f:f9:b7:c3:b9:d5:
0b:f8:b5:ec:43:cb:0d:77:2b:f9:2d:0e:6d:b1:9b:
08:01:e5:49:d3:1b:c5:be:06:a3:3a:2b:e6:ad:f7:
1b:a6:24:1c:c7:39:9e:98:d9:19:44:31:99:71:15:
2b:2b:0a:d0:f5:51:0b:ef:48:6f:dc:72:50:bd:1d:
c6:a0:ea:10:e3:95:dd:7b:36:72:25:dd:36:7d:aa:
91:35:9f:ae:1b:ff:6d:37:90:44:0a:4b:26:d4:26:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:F8:BB:DA:7E:E8:FE:30:13:D1:B2:31:E4:82:2E:E0:69:6B:FD
X509v3 Authority Key Identifier:
keyid:B5:0E:DF:C9:6D:2B:61:78:86:89:53:31:42:96:9E:65:56:65:12:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/dc09cf-770c-4172-a6ee-b61384ff0ec2/1/tQ7fyW0rYXiGiVMxQpaeZVZlEqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d9:79:5c:a9:06:fb:de:52:c5:39:55:f0:5e:d1:c6:00:29:
57:f1:f5:8d:f3:6e:4d:51:d4:05:ef:98:05:ae:47:24:34:bd:
f8:64:6a:c7:84:5d:62:e2:99:0f:97:b3:26:d7:19:2b:87:93:
cd:0c:96:cb:d5:ec:62:71:07:ef:e3:1c:53:fd:04:35:f4:d5:
dd:65:51:bf:dd:a8:22:2a:fe:38:a5:80:35:6b:cd:93:d9:f6:
5a:8c:30:19:e0:ab:bf:5c:8d:20:52:bb:e4:d5:42:5d:91:fe:
4e:ad:cd:68:c8:5f:e4:cc:91:87:f2:78:30:1b:e9:e1:ee:de:
e5:ad:7b:c7:f4:7f:f5:eb:05:f6:f3:d4:fd:f5:8d:e5:82:2c:
85:b2:b5:de:32:e4:e9:fb:ae:94:4d:34:a6:44:25:45:7e:57:
54:cd:ea:60:d1:37:cd:dc:67:75:90:ee:d5:5f:02:f7:80:74:
00:0e:e0:ba:d2:92:f4:db:82:1d:0a:e7:64:fe:97:11:bc:90:
b5:63:e9:44:85:04:bc:2a:a4:e1:82:f1:1b:23:c2:a9:70:e2:
b0:d0:20:69:32:86:69:e9:27:a3:7c:72:f3:77:f4:15:1b:5a:
58:03:c1:ce:22:df:83:b2:7f:e0:4b:97:e7:81:e5:53:cd:4e:
fe:69:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:30 2025 by rpki-client