Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
File: ejUIviqGjWzlTbmzqGTUvphcrk0.mft (raw, json)
Hash identifier: 9Gg3Boh/7yjjgsoT6PlJA6E8ZmLQeQNSNa8S24T5ATg=
Subject key identifier: DE:15:FA:9A:52:66:19:F2:E3:C2:9B:83:E7:FB:ED:8B:0C:44:05:69
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 019849669AE5F344400B6E5DC3279B7D7C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
Manifest number: 0667
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: ejUIviqGjWzlTbmzqGTUvphcrk0.crl (hash: /8zGTm6hHAvvgVvha7W0MFlXEoknEyDMzWgFkEBf5wg=)
2: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (hash: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9a:e5:f3:44:40:0b:6e:5d:c3:27:9b:7d:7c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=de15fa9a526619f2e3c29b83e7fbed8b0c440569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:fa:f6:1b:10:88:eb:ee:27:03:b4:30:a3:
bb:a1:50:c3:36:f5:d7:8e:0c:bf:85:b2:12:ed:b0:
62:5c:d8:f4:7d:c6:5e:f4:9b:cc:41:4f:e1:e4:49:
0b:31:16:9e:de:a9:b1:9b:94:f5:be:46:51:3b:e5:
18:04:1a:bd:5b:6b:c5:fa:2f:fd:f2:0a:35:23:70:
a1:8e:5e:a6:27:42:1c:07:4c:ba:c1:d3:04:6b:97:
ac:16:be:33:05:41:bb:7e:06:8d:3f:f2:4c:f9:3e:
ea:25:e2:42:96:0d:c8:59:17:19:83:ba:2e:82:39:
37:ed:de:4a:95:3a:0b:47:f9:de:fb:c7:2c:43:db:
ac:f5:6a:71:e6:3f:b8:8f:ea:23:36:74:46:90:c4:
29:d4:41:1b:a5:0a:cb:94:34:98:a5:c8:68:82:cd:
98:a6:2f:77:c1:66:ea:81:51:96:d2:10:9c:31:8b:
12:3d:94:60:81:cc:cd:05:ac:5c:86:f3:a5:de:73:
d6:8d:ea:d4:1a:64:05:b2:40:6c:57:94:cc:aa:1d:
93:f3:9c:cb:f5:b7:31:51:9d:28:06:3f:64:da:32:
49:4a:6b:95:02:f8:ea:09:a2:3e:98:1e:60:a0:ce:
f6:fc:f3:8d:91:e7:a3:1f:42:c8:ea:f7:68:89:72:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:FA:9A:52:66:19:F2:E3:C2:9B:83:E7:FB:ED:8B:0C:44:05:69
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:7b:8f:56:ff:0e:02:3f:bd:f7:4a:23:89:5d:f4:3f:a3:
5d:76:dd:52:1b:cf:5b:cc:e9:de:8d:c2:4a:ff:f8:02:f6:c4:
87:e1:63:31:b1:2e:26:aa:97:6e:6d:2a:43:2a:74:f7:6e:f6:
d9:2b:e3:6d:73:85:89:1c:85:49:7b:e8:8e:8e:8a:b5:f3:0a:
db:9e:3d:ce:f4:15:16:77:21:d7:09:04:7d:d0:47:85:84:1f:
2d:90:67:ad:e5:46:a4:2f:b4:eb:3e:46:b2:bf:1f:70:11:75:
2f:be:f5:e0:6d:9a:cf:a5:28:42:88:6b:c0:39:aa:39:30:c9:
16:ea:c3:5c:58:c4:89:5b:05:3b:32:19:16:7b:59:47:a5:d2:
7f:41:1f:9c:96:18:e1:34:28:5e:e0:d9:d4:39:25:45:54:f5:
3a:07:18:0b:33:18:13:15:52:5b:6b:8f:01:b1:0b:6c:97:e9:
fa:f6:6e:69:5e:50:29:20:83:30:2b:33:12:8f:a6:6c:ba:48:
b8:9a:66:fd:1f:d0:24:c5:f0:5f:07:31:f0:0d:30:1c:1e:20:
c8:49:bc:e7:ca:c2:ef:de:51:11:d3:d7:23:4e:9b:a2:d4:c6:
60:b7:23:d7:84:2f:5e:09:67:e4:af:1c:06:66:ff:14:a9:f5:
a3:2b:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:35 2025 by rpki-client