Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: ThCM5PzOY84aPFSK4+OoFIMiuqSu7vbtW2U5k7lZxKI=
Subject key identifier: E3:CF:C9:E6:EE:8B:62:3B:44:CF:5C:B1:95:32:93:3A:06:4F:A1:84
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0198443F2792CD8A65F0EEE8CCA73CCB0F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 01:00:46 +0000
Manifest this update: Sat 26 Jul 2025 01:00:46 +0000
Manifest next update: Sun 27 Jul 2025 01:00:46 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: ch009MrBFC8QhQWrkrV3y+xEeyAx3jiTtaGLZaQhYnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:27:92:cd:8a:65:f0:ee:e8:cc:a7:3c:cb:0f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jul 26 01:00:46 2025 GMT
Not After : Jul 27 01:00:46 2025 GMT
Subject: CN=e3cfc9e6ee8b623b44cf5cb19532933a064fa184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:ad:7a:18:66:36:74:88:49:0a:3f:04:d8:
8d:aa:23:f2:05:45:4c:72:21:9a:fb:ff:8e:0b:ad:
d4:d8:ac:c4:c1:1d:ef:bc:78:69:d1:36:01:2e:95:
b0:97:e9:8f:f5:61:16:55:dd:75:6f:1a:3a:97:f9:
83:39:31:56:71:23:e2:6e:96:1f:23:54:f4:21:81:
e2:11:8d:be:30:1b:ff:ad:9f:aa:b3:f8:4e:45:67:
77:7a:13:f5:6b:90:ba:3b:e5:35:c0:b8:e6:4e:c9:
f0:10:6b:ac:ae:f1:33:fd:6d:89:25:24:bd:40:5c:
1d:d2:a9:e4:48:4a:b7:8e:fb:1d:99:d3:bb:69:dd:
45:5a:56:6e:83:69:d0:46:86:1c:3d:d7:c4:ad:3d:
4f:72:b5:4f:c3:e0:20:ee:c3:9c:65:49:06:69:36:
c1:60:92:37:b5:4f:06:eb:6c:79:83:4e:27:78:8a:
18:12:de:fb:05:c8:1f:33:3d:88:ba:f7:82:2d:dc:
f7:2d:b3:b2:f4:0d:d5:11:df:bc:0f:2a:39:d8:55:
82:5b:73:f0:35:d7:3e:49:7f:cd:c2:11:91:d3:0a:
e4:d5:37:ed:d6:97:11:0a:8c:e4:a1:40:1e:15:41:
26:18:2c:29:51:07:49:72:00:6a:6b:0c:06:0b:71:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:C9:E6:EE:8B:62:3B:44:CF:5C:B1:95:32:93:3A:06:4F:A1:84
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:37:98:c7:0a:bb:7d:c5:f4:67:96:11:d0:a7:cb:25:9a:50:
58:b7:20:00:bf:36:0d:66:d6:f7:3e:67:34:43:30:9a:af:03:
9c:01:ed:b4:bc:23:d7:14:4f:3e:b7:0d:1b:48:01:e7:a0:6b:
d9:76:b5:b2:26:04:63:be:22:80:32:b5:7e:ed:5c:4e:3c:84:
9a:bc:75:d8:f9:1a:7c:cb:52:82:81:1d:6f:fb:28:e4:5c:ac:
d6:d6:07:87:fc:b2:35:0d:45:a5:a1:c2:3a:49:55:b0:13:0b:
a9:ea:9e:3b:bc:14:db:60:81:26:5f:dd:a5:59:ca:a2:60:54:
0a:be:73:db:e2:19:5f:92:f2:60:0b:0f:ee:29:81:9b:09:ed:
be:dd:4f:51:39:1e:3f:22:b5:03:99:ef:be:b1:9a:e1:9f:d3:
ec:36:c5:62:84:6f:ee:35:8a:b2:0d:ff:b2:b5:c1:a4:fb:e8:
a0:02:60:3f:0e:67:9f:0b:a1:70:ab:dd:fd:d3:25:b6:15:84:
e6:85:32:00:90:71:8d:38:0f:48:76:da:62:e6:5e:a1:df:e9:
25:f0:e3:fe:ca:50:2e:a6:ed:fd:29:93:cb:5c:6b:e7:41:78:
d8:38:67:9c:b2:a1:4c:c2:25:d7:16:16:52:69:63:81:eb:51:
34:30:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:41:39 2025 by rpki-client