Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: daW3SwpUU3bS+W/hybslIWUhmPzabuj3M2uq61CFwHM=
Subject key identifier: B7:D4:14:E4:92:EE:35:A0:7B:2B:DA:6C:51:CF:D8:0F:21:06:D8:AE
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 0197B70EC66E1C8A779E7DD0EA859AD82360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 0596
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: ifBsZI7jfE/4Ht77E4SFQknxsBImC+dKXPQXuDvJUBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:6e:1c:8a:77:9e:7d:d0:ea:85:9a:d8:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=b7d414e492ee35a07b2bda6c51cfd80f2106d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:d6:71:06:aa:ae:bd:5e:e4:45:5d:a7:99:
91:64:7a:db:81:16:de:28:ca:12:6d:df:66:02:a9:
a4:e5:32:39:96:66:97:2a:e8:ce:e7:ce:7c:9e:d6:
08:ed:0f:8b:c5:58:2b:1c:87:e2:ff:78:eb:5d:31:
50:c4:3d:fb:1c:ad:59:0c:7e:1a:73:d8:81:2a:2d:
87:37:b0:4c:80:fa:46:d6:bc:a2:e9:9c:50:c0:2a:
55:0a:39:07:d2:48:08:35:53:42:eb:bd:25:a7:dc:
5f:25:3c:41:36:1b:8b:e8:d2:59:b2:82:e0:7e:a6:
0d:e2:04:38:4b:91:63:0b:97:c1:2d:9f:59:de:b0:
ae:86:93:ba:90:8f:78:35:9d:50:d1:c6:cc:7c:c7:
86:e5:0d:83:6e:27:3a:5c:d5:9c:9d:26:e0:da:a4:
55:fb:97:10:c1:57:97:92:c9:e2:0e:b5:16:03:5f:
91:ec:8a:25:b9:b1:92:41:5d:47:6a:41:f9:92:09:
6d:34:ab:ef:48:e8:53:00:15:2f:94:58:fa:5c:d7:
7a:fe:7e:7b:69:04:c7:47:4d:e0:1e:64:3d:2c:b2:
35:9c:95:ea:ae:a5:57:fa:a4:76:6d:06:b7:ad:00:
72:81:1e:07:53:6d:ee:82:a7:1a:26:02:67:4b:85:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:14:E4:92:EE:35:A0:7B:2B:DA:6C:51:CF:D8:0F:21:06:D8:AE
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d1:bb:40:e5:55:b7:4a:d5:97:8d:a1:76:fa:85:0b:30:a5:
c9:02:2c:10:86:40:e4:26:08:67:75:61:5f:31:c9:db:f1:19:
a3:94:98:30:fc:77:4b:c7:82:f0:8d:0e:95:54:e1:fd:f9:9e:
8f:d4:80:8c:32:bd:8f:aa:73:57:36:90:b9:f2:be:d2:d0:f0:
8c:60:40:40:69:f8:28:f7:95:6a:35:4d:03:3b:68:56:57:1f:
5f:eb:df:c5:13:ef:cc:50:ab:80:9c:45:6b:1c:7a:6a:e6:db:
0b:6a:04:9d:f6:51:b2:45:07:67:e3:1b:90:6a:4a:6d:41:bd:
e3:66:93:20:b7:47:2c:21:40:5d:dc:48:72:b3:ec:11:51:40:
f7:cc:d8:34:35:e9:d5:b4:76:f6:f4:18:cc:24:48:16:35:2f:
03:88:39:aa:e7:54:90:5a:47:5e:c1:0c:a3:1d:6c:5e:85:a2:
2a:80:d7:01:9a:8b:f3:e4:68:a8:df:28:f5:6e:1b:17:38:e2:
ad:61:d3:4d:ef:e8:91:12:95:67:d1:60:ae:40:72:07:c0:d0:
93:ac:49:73:54:58:57:de:b1:be:93:ac:48:fc:c7:56:b9:8e:
2e:24:69:ec:3e:16:fc:a5:03:8c:b1:df:be:fd:e1:b7:62:b6:
cf:cb:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:15 2025 by rpki-client