Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: dTmr76CDnyQQYQeJt+bh43a+OqC3gGRPhHENAKuPDUA=
Subject key identifier: BD:D0:A8:D9:7B:48:75:B5:62:89:DD:C6:00:05:23:EE:0C:2B:62:B4
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 01984A41682E905E2C8BF1CF066C52F3F7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 0CE1
Signing time: Sun 27 Jul 2025 05:00:57 +0000
Manifest this update: Sun 27 Jul 2025 05:00:57 +0000
Manifest next update: Mon 28 Jul 2025 05:00:57 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: C9L8gMbDV2U4d67RlFsPHjfuO7fO+qHo7FY//yfZJME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:68:2e:90:5e:2c:8b:f1:cf:06:6c:52:f3:f7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Jul 27 05:00:57 2025 GMT
Not After : Jul 28 05:00:57 2025 GMT
Subject: CN=bdd0a8d97b4875b56289ddc6000523ee0c2b62b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:49:29:5d:67:ce:68:a5:af:66:f3:26:2a:
97:34:ba:ea:c0:ff:a5:ba:38:e2:e4:fb:d8:e2:9c:
7a:d7:80:b7:cf:cc:c1:8e:2d:85:60:57:51:1d:ff:
5b:33:fb:7a:35:fa:49:fb:cb:8c:0d:92:f1:86:56:
62:0e:24:11:09:8f:28:11:3c:b0:52:f8:5e:d5:00:
dd:fa:ef:e8:09:16:fb:12:9d:c1:bf:1c:aa:5d:97:
30:c5:49:1b:f5:5a:d3:71:c1:9a:9e:c7:8f:97:5e:
ab:c5:25:eb:ef:59:61:36:7e:3d:53:13:18:5b:34:
f2:e2:a0:17:9c:0b:e4:cc:58:8b:46:92:f2:79:36:
b3:0d:29:5a:a5:6d:54:0f:85:9b:d9:ba:bb:18:f8:
62:50:65:c3:05:dc:94:dc:1d:a3:f1:47:ea:c0:7e:
92:11:48:76:4b:bf:63:63:53:68:a5:d6:a0:97:bd:
51:59:48:d4:59:06:72:1b:ef:31:13:8a:5d:2d:53:
02:c0:1e:df:2d:4e:4f:5a:d6:16:94:b8:f5:5b:18:
15:2a:23:2e:70:03:7b:bd:33:f6:bd:63:bb:a1:5b:
9b:39:12:6b:2e:07:05:23:95:5e:53:89:87:eb:fa:
7a:52:c3:62:73:96:2e:d6:84:2f:12:04:53:cf:2e:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:A8:D9:7B:48:75:B5:62:89:DD:C6:00:05:23:EE:0C:2B:62:B4
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:09:9a:6d:09:b0:fe:0b:8d:7c:61:cc:42:0b:4c:83:00:17:
be:b4:67:2d:d7:e3:c2:69:fd:74:f1:7e:58:90:40:b1:13:4a:
9c:ba:60:7f:8a:66:d8:43:e4:17:8d:35:a8:fc:aa:34:88:1a:
1b:62:88:95:87:62:9b:0e:3e:5e:a3:ae:9a:0c:4b:ed:12:d1:
f3:5c:48:ef:68:da:4f:b7:5f:ac:cf:fa:bb:73:89:bc:0f:03:
01:f0:e0:e7:e3:8b:34:31:60:30:81:13:56:4c:6b:d5:59:de:
a5:bc:c3:61:5a:c7:46:19:38:af:bf:a1:76:6f:e2:23:24:59:
d4:4a:b6:cd:15:92:58:76:83:6b:7d:6a:74:0a:df:0e:66:29:
9b:fa:30:9c:75:00:b8:c2:d7:58:8a:a8:2e:6f:9a:2c:d0:a7:
ff:18:29:79:b1:c4:85:08:a7:a9:22:f7:00:4f:d4:b9:18:2e:
63:77:d5:62:c6:fa:a8:ce:54:85:4a:a3:55:c4:27:76:88:7a:
d6:cc:01:d7:60:8d:41:3b:a1:71:2b:5c:03:45:9a:90:78:91:
49:3a:aa:3f:5b:9a:c9:a3:84:79:59:42:17:d0:ff:1d:69:a0:
c3:bc:c7:ff:47:3a:c0:67:77:7a:5a:34:7c:29:b3:29:48:25:
c1:15:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:21 2025 by rpki-client