Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: LiG4LelWaVGQSfIoyuSv6ZiCDSX7hoNkncxi+XEWGWQ=
Subject key identifier: 02:E3:A6:C0:85:E9:AE:80:B6:B3:D6:CA:CC:D7:95:67:93:48:76:22
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 0197B7B381FEFFEA06DDA7E38BA5AD6A2BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 0552
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: VaK0mNzcjckmtlrCzZy9OpCJlJn8ZseJg8RW+2Gf6NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:81:fe:ff:ea:06:dd:a7:e3:8b:a5:ad:6a:2b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=02e3a6c085e9ae80b6b3d6caccd7956793487622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:f1:0f:4d:da:60:5a:26:ff:d8:17:e5:06:
83:b2:11:45:7a:49:d0:36:56:ce:84:9b:28:bb:73:
3e:83:95:03:e8:d4:1e:79:49:fd:11:da:7a:05:f8:
f0:44:ee:6e:e6:6f:89:be:9f:6f:ff:02:4b:bb:5e:
c8:72:65:03:4e:5e:62:7c:51:c1:99:3b:f2:07:63:
34:0b:2a:7a:7d:f0:b4:6d:86:e9:f2:f8:d9:83:d6:
26:da:92:ca:13:97:02:30:80:3e:33:be:cc:3d:ed:
da:58:db:f2:f1:8f:74:79:7b:95:52:94:df:00:82:
9a:18:33:7d:f9:29:10:7e:be:ea:d3:b4:8a:35:db:
9f:65:44:fa:93:7d:fd:b4:6b:d3:f5:f4:02:e2:5a:
8a:a7:66:0f:ee:81:38:fd:bc:62:63:f8:55:55:57:
fa:ee:41:0d:82:ec:96:b3:ac:6f:58:54:7c:04:d9:
f7:09:1d:e8:86:fa:b9:7b:2b:07:ee:04:e5:41:eb:
f0:6c:db:90:e0:b2:4e:69:d6:db:bd:13:6e:e9:ba:
b8:4d:e0:8a:02:6e:26:d6:e7:f4:a0:9a:91:ce:df:
f3:de:a3:3d:20:1c:c4:31:2c:6e:40:19:d1:c9:d7:
1c:38:82:ca:a4:7f:5e:98:d5:e6:63:f9:33:6f:8b:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:A6:C0:85:E9:AE:80:B6:B3:D6:CA:CC:D7:95:67:93:48:76:22
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:f0:b0:32:a3:18:fa:db:65:ea:81:d7:60:82:fd:d9:bf:
38:d0:7d:06:b6:26:21:fc:e9:1f:28:d0:6a:be:ce:4f:99:c5:
47:3d:99:53:9b:7c:1a:e1:e5:4d:3e:b4:cd:79:d5:f6:9c:f9:
8f:4b:f0:30:c1:e1:07:5a:f2:c7:04:10:71:00:82:36:c6:49:
20:9c:fc:83:13:13:28:4c:ca:d4:4c:36:3c:1a:21:a8:aa:89:
62:48:99:43:b4:30:75:40:f1:20:f5:3f:ac:6d:da:08:ad:27:
5d:3e:81:04:3d:51:5c:86:47:37:d7:78:b5:ad:18:56:de:51:
79:f5:72:82:7a:e2:0e:c9:db:d3:f9:37:a1:dd:db:74:20:f3:
5b:3c:c8:d1:c9:57:59:55:1a:97:72:21:52:f8:17:ba:87:77:
d5:54:77:97:07:03:97:56:bb:92:48:4f:06:9b:2f:ad:cc:3e:
bd:b3:82:bf:e7:d4:7c:8d:6d:ce:fa:77:85:1a:75:f5:d7:e4:
0c:14:f3:da:57:c7:2b:6b:29:63:32:ca:be:29:25:4d:7d:96:
43:b1:e2:07:bd:fd:3c:b2:f6:9c:33:93:61:6d:bc:db:a6:c4:
43:75:3c:0c:de:ff:44:26:cb:c4:17:c3:3b:5f:2f:47:b7:07:
a8:f2:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:23 2025 by rpki-client