Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: yJrno/UDMBvV5axsNjWIrKNbrqgSg7bnd9gV2fwOkkI=
Subject key identifier: 24:A1:21:98:86:AF:50:F7:84:6D:48:33:60:39:C5:49:76:5A:A1:3E
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 019827EC42FFB83B71BD194EA9E91A632773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 0E
Signing time: Sun 20 Jul 2025 13:00:51 +0000
Manifest this update: Sun 20 Jul 2025 13:00:51 +0000
Manifest next update: Mon 21 Jul 2025 13:00:51 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: iKV9V3ho07cuCCTvoavoGT7FPkU0kLxEZzOaqmz78j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:42:ff:b8:3b:71:bd:19:4e:a9:e9:1a:63:27:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Jul 20 13:00:51 2025 GMT
Not After : Jul 21 13:00:51 2025 GMT
Subject: CN=24a1219886af50f7846d48336039c549765aa13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:56:5c:75:6b:8d:0c:55:56:c2:93:15:6a:
f8:f8:4c:b0:f4:e2:f4:3a:26:9b:6c:04:b6:9b:42:
93:e3:26:e9:89:43:b7:ce:b7:06:69:c0:9d:cf:67:
d7:e6:33:fc:e7:44:cd:84:be:21:42:d1:63:15:b4:
9a:44:4a:fb:6b:6b:15:96:e5:fc:16:40:b4:e9:bf:
86:22:ab:6f:21:c7:7e:42:df:0b:f4:ee:74:ce:cf:
a5:bc:11:65:fa:81:70:f5:5f:31:87:aa:ea:63:ea:
88:11:b4:27:fc:8a:8b:3e:71:1b:54:78:e1:f5:a6:
3b:13:ad:8d:22:cf:86:12:95:f0:0a:d5:9d:84:17:
e2:7b:ac:34:ed:fc:fb:42:c5:ef:51:5e:a0:83:b3:
f3:c8:33:12:d1:f2:92:37:3b:0d:66:16:c6:23:c2:
5d:86:fc:15:93:15:93:d2:e0:55:d2:9f:b6:ed:12:
34:6f:d8:8f:70:48:38:eb:26:28:ca:7c:99:4b:37:
aa:6b:ab:53:be:c8:03:f3:d7:f8:45:50:49:4c:02:
13:81:20:c4:87:21:b2:e2:ec:76:82:c6:5e:a4:8f:
68:1a:d1:fc:7e:cc:08:14:86:6d:83:1a:4d:e2:88:
d1:4a:db:a0:bc:3d:16:48:65:aa:7f:5f:7b:c9:d5:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:21:98:86:AF:50:F7:84:6D:48:33:60:39:C5:49:76:5A:A1:3E
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b4:e5:53:d3:17:6c:60:2e:bb:69:04:b2:3b:8d:e9:66:17:
28:23:41:e5:ed:f8:a8:16:55:8c:17:ba:ea:8d:e5:fb:1b:10:
d7:be:2e:c6:68:76:1b:50:86:d9:27:f9:d6:9a:8d:90:fa:f5:
4b:c0:9d:7c:b3:24:2e:1b:8d:37:cf:11:15:02:87:61:f9:c3:
2c:3b:cf:96:60:e5:b2:2b:1d:45:03:6d:8c:ee:66:51:8f:3f:
40:4c:09:fd:ed:8f:2f:90:3a:ee:d6:89:57:e9:e3:9b:2c:39:
a2:ab:14:28:c2:9f:62:85:11:c2:87:59:d2:52:1e:c9:0e:16:
3b:b9:8b:2b:24:d8:45:a2:40:ab:15:b2:69:c0:4d:01:97:99:
0e:d1:1d:8c:a2:72:d7:00:55:82:64:a5:43:0f:e5:ea:d8:07:
a1:8b:b9:dd:ea:b7:25:ff:a4:49:dd:89:df:c0:90:4d:54:49:
64:e7:9c:37:51:9e:0e:56:e0:c1:08:04:35:63:c2:b9:21:5c:
31:c9:31:65:fb:83:f1:fb:29:53:cb:26:ec:ad:9c:a0:fc:07:
ab:cd:1f:b9:93:8b:e2:fd:e9:0e:91:75:c7:da:4c:12:68:45:
bf:ed:2f:9b:2d:ef:5d:2a:8d:c9:b9:f1:a4:ec:3e:70:3e:23:
71:c4:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:30 2025 by rpki-client