Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: 1SUyJs/qTW1vS35PZ9WOio8D950U8+pG/vvmgG/8WjY=
Subject key identifier: D6:AE:EB:94:39:9F:98:2E:6B:04:EA:F4:02:5F:52:CE:F0:95:45:C1
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 0197B6A0F12996618FA9F0F63DE1C02A18C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 0E77
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: YXL1LSbNTv4pdofkklqZ/kt5OY9oDeaOnQNNnlAdXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f1:29:96:61:8f:a9:f0:f6:3d:e1:c0:2a:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=d6aeeb94399f982e6b04eaf4025f52cef09545c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:5b:2e:39:9e:88:bd:fe:9f:ef:44:75:87:
bc:33:d4:47:a8:f9:38:0a:44:08:ae:95:7f:b2:52:
80:e9:fd:60:9e:2d:22:cd:99:cf:1b:44:c8:c9:fd:
74:c8:5c:be:17:87:cb:c0:28:1c:f6:b2:0f:b8:0e:
1e:66:ba:a8:1e:6b:b5:c0:80:47:58:ed:d2:de:ed:
87:23:8f:42:fa:b9:50:f1:d2:6c:c2:de:fb:d1:9b:
6d:75:70:fa:2c:50:da:39:c4:2a:43:7b:2c:1a:c5:
76:e8:af:69:33:3b:d6:92:75:a5:07:99:d6:c3:d0:
e8:05:39:bf:77:7c:4f:9a:66:87:4f:6f:7f:90:7f:
88:87:57:8b:81:be:f0:10:5a:2b:0b:5c:f6:0d:4c:
eb:a4:09:4f:a6:91:b6:85:84:8c:d6:33:b6:82:39:
91:3a:38:b4:00:b1:b5:d3:24:54:6d:ad:7d:e2:d7:
c0:e6:ea:bf:fe:66:5f:e3:df:67:21:71:56:06:52:
4c:85:a0:a6:b7:20:01:c0:c4:b3:d0:6b:94:54:16:
84:6b:5a:b6:50:fd:81:0d:f5:fc:36:b0:db:0b:7d:
bc:32:24:db:19:0a:75:a5:a4:49:fa:cc:00:92:49:
2e:62:4b:c1:b1:cd:29:e2:46:49:cc:cc:00:ee:34:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:EB:94:39:9F:98:2E:6B:04:EA:F4:02:5F:52:CE:F0:95:45:C1
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b0:1d:77:a6:73:b3:86:77:1d:39:d1:15:eb:e9:14:ca:de:
57:ec:2b:44:f1:c9:43:f4:f9:fd:98:ba:dd:0c:f0:67:f0:51:
ea:3d:0b:10:68:48:ea:70:dc:41:c4:3e:91:15:88:56:63:4f:
6d:e6:6b:99:1e:f2:c2:fc:c6:a5:05:10:2a:db:1b:27:87:0f:
a5:9e:d2:b0:73:5e:c7:c3:44:4e:28:25:bf:b8:ee:a2:28:39:
04:73:4d:04:d2:c5:00:33:bf:7b:ed:1c:2a:11:80:9d:91:04:
a7:65:4d:87:95:98:cf:dd:a9:2b:81:5b:03:02:03:c8:48:cf:
14:fa:2e:9f:b3:ac:11:27:88:e8:78:ba:2f:d3:65:66:0e:98:
12:cd:e5:41:37:6a:2a:6a:2d:ea:d2:8e:b6:ae:f3:50:a2:9b:
89:bc:1c:30:5d:ea:62:0d:6d:a6:4f:7f:dd:0b:95:69:85:8d:
29:55:0f:48:1c:2a:f5:f9:d5:98:c0:1d:36:d2:c9:06:1d:70:
a9:74:3a:2a:4d:5f:ae:f0:8c:10:3b:f6:78:04:03:1e:41:a8:
21:b7:fd:b9:e8:a1:ff:11:7d:70:2f:00:57:a5:8c:8d:ac:56:
3b:1a:a9:c3:99:5f:b4:3e:18:9d:f6:f3:a0:45:d4:04:7c:79:
52:07:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:30 2025 by rpki-client