Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
File: 7dnow7XdvumM1_7qDf-MdiW4Wp0.mft (raw, json)
Hash identifier: /CY3n1TJV3WZ4bOpXUeuXqFD+7HLYo8hiHr7t8vHTFM=
Subject key identifier: F6:CF:2D:90:4E:EC:2F:6E:AB:CD:14:9E:B5:00:AA:2A:14:8A:D7:92
Authority key identifier: ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
Certificate issuer: /CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Certificate serial: 0197B77C78DD2CD76730ECD13CB4035A45C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
Manifest number: 0B25
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: 7dnow7XdvumM1_7qDf-MdiW4Wp0.crl (hash: hqRgWLTCRyEvv1JDDPADuh+fJ7TnZlzEAycmi1u2i14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:78:dd:2c:d7:67:30:ec:d1:3c:b4:03:5a:45:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd9e8c3b5ddbee98cd7feea0dff8c7625b85a9d
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=f6cf2d904eec2f6eabcd149eb500aa2a148ad792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:7e:28:63:e4:0b:ad:ff:a5:8d:36:a7:36:
2e:95:60:95:9f:7c:a5:8b:3b:32:0e:db:7e:0d:07:
0d:98:ff:b2:6f:3a:82:ac:e7:a1:71:5f:3f:a9:2b:
76:4c:17:c0:22:f6:4b:52:58:b1:18:85:df:50:d3:
f4:9e:90:c5:31:f7:92:91:c8:de:80:f3:b4:7d:90:
b4:1c:14:4c:60:7e:fa:eb:19:be:e3:e4:e1:8a:a4:
74:55:94:76:c6:ca:c4:a9:08:0c:8f:28:c3:80:66:
a6:4e:38:f4:a0:35:e5:68:03:a7:7b:72:31:df:fc:
31:f1:ea:d4:9d:28:3c:35:4e:b3:74:90:b5:79:c4:
f9:8c:31:94:1c:05:e1:b0:d0:21:d0:51:89:59:5e:
0d:1c:c8:ac:16:b8:12:e7:84:81:46:79:4c:5c:80:
38:d4:01:b8:ec:6c:1e:71:49:a7:be:ed:28:48:d1:
b4:59:5d:e9:02:0d:eb:13:f1:a9:9b:be:de:f5:ee:
4d:16:da:81:76:90:0e:4d:f5:47:ae:0d:e6:6f:54:
1c:2f:41:30:85:08:53:97:37:8b:d8:a4:0b:12:61:
5b:70:93:4d:55:2e:0e:db:f6:70:e8:9a:6e:74:b3:
21:e4:18:4c:7e:1c:ac:8d:5a:f4:b5:f3:13:84:33:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:2D:90:4E:EC:2F:6E:AB:CD:14:9E:B5:00:AA:2A:14:8A:D7:92
X509v3 Authority Key Identifier:
keyid:ED:D9:E8:C3:B5:DD:BE:E9:8C:D7:FE:EA:0D:FF:8C:76:25:B8:5A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dnow7XdvumM1_7qDf-MdiW4Wp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ada7cf-91e2-4e38-96fc-a286ea11d100/1/7dnow7XdvumM1_7qDf-MdiW4Wp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:54:50:14:3d:67:81:dd:50:2b:63:7c:38:0a:db:6f:30:
e0:10:7d:95:a4:3e:71:d9:05:86:1a:63:67:f8:c6:c0:35:b6:
1d:f4:89:90:67:b7:0b:47:c3:ff:f4:60:05:2f:d5:f5:66:12:
f0:17:2a:9a:3f:67:23:88:2d:63:64:c8:55:cf:bc:e6:9f:a1:
40:d6:ed:54:70:42:60:c2:bc:53:3b:09:bf:95:60:02:77:ee:
6c:fc:88:bc:05:ba:9a:a8:08:31:f6:48:14:33:77:ba:eb:bf:
e2:73:ac:20:71:2f:e0:b9:8e:a8:3f:d7:b2:b6:ab:3c:c5:d6:
cf:e7:7d:8d:a8:b4:43:fb:d1:a8:1d:7b:93:c2:d5:8c:11:56:
20:09:11:f7:42:06:5e:d6:a3:81:83:dc:ac:1e:c0:52:70:e4:
f5:c1:b4:e4:47:2a:dc:58:84:6e:b0:0f:58:0b:25:48:93:99:
16:8c:7e:3c:14:06:22:b5:24:f9:e3:18:c2:18:67:7e:44:64:
b6:bd:4c:f6:3f:30:69:a2:08:da:24:35:60:1a:85:2e:93:93:
52:7b:5b:70:6b:14:78:c3:4b:be:9a:4a:2f:1b:d8:60:26:37:
a1:e2:33:7e:20:68:5d:ce:ee:f6:46:ef:5f:95:9b:e3:05:0a:
c9:be:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:18 2025 by rpki-client