Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: RfJiek3xIIiluBrRB0IGf6MgLfw9Hub0+mkX7mQl8a0=
Subject key identifier: 5A:3F:42:2B:17:A8:02:6E:78:C9:97:09:AD:99:B8:09:A2:D8:AB:BA
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 01984966A7C0F67B90A08A12FF6116923C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:02:00 +0000
Manifest this update: Sun 27 Jul 2025 01:02:00 +0000
Manifest next update: Mon 28 Jul 2025 01:02:00 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: 1qidADS8wFwEr3TZ8sugntS7KSAsPwJSafmvcTWAFcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a7:c0:f6:7b:90:a0:8a:12:ff:61:16:92:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Jul 27 01:02:00 2025 GMT
Not After : Jul 28 01:02:00 2025 GMT
Subject: CN=5a3f422b17a8026e78c99709ad99b809a2d8abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:1f:dc:7f:b0:29:84:2e:f7:d9:0e:41:59:
bc:83:46:dd:e8:d2:2e:e2:95:78:8c:ec:08:bb:21:
09:52:e6:85:ac:27:27:88:b9:fb:9b:2b:2a:2b:13:
95:90:ba:81:36:87:5d:68:82:ee:e7:30:c8:30:83:
f3:be:85:05:86:4f:2e:d8:4d:a7:d2:3e:d9:7f:79:
c6:7d:33:f7:71:b1:46:90:88:28:15:20:b2:99:43:
67:bf:fb:f4:2e:e9:ad:08:13:fc:96:5c:83:51:96:
67:b5:44:3e:18:b3:0e:5f:40:ac:12:1b:c6:de:48:
93:f3:ad:2a:5f:76:c9:56:ac:e7:98:50:da:a6:d1:
02:fa:81:54:54:c9:06:29:57:6f:77:b7:54:5b:e1:
69:31:66:c1:07:20:ff:44:70:37:6f:89:57:ad:37:
54:7e:06:b9:06:9f:52:54:6b:ac:b7:33:b1:7b:81:
37:bc:1e:9a:ca:ae:09:4c:fc:6e:76:fe:2d:96:94:
7a:f5:4d:7a:93:3f:6d:2d:60:e5:bd:4d:25:e2:a3:
b8:64:58:06:d3:18:42:ab:9b:f7:22:14:a7:22:a1:
26:03:cc:96:d5:ee:e0:70:d5:7f:ee:f8:15:6d:07:
0a:3c:f0:f9:d5:a4:78:7b:77:e5:3c:5c:25:0d:a4:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:42:2B:17:A8:02:6E:78:C9:97:09:AD:99:B8:09:A2:D8:AB:BA
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:ff:72:43:2a:28:fd:c9:f5:c4:e3:0b:7f:3b:e9:de:d6:
dd:ab:ad:5d:ed:e2:de:a9:da:c4:84:20:f9:70:3a:42:ae:77:
fd:0d:31:4b:e4:9d:28:e8:39:e9:85:37:73:30:33:11:a4:79:
bc:88:22:b8:ba:0a:c6:64:1c:d5:09:31:3b:54:4d:68:c6:07:
0c:72:fe:95:71:fe:68:1c:bc:18:c9:36:3a:e7:05:01:89:97:
d4:eb:75:fc:d3:98:03:ae:db:4d:61:c7:69:bb:a0:1b:d5:de:
4b:a9:a8:31:dd:05:9e:ab:0c:a0:8d:66:1c:f8:32:cd:eb:47:
39:b1:ed:50:31:bb:27:23:4d:88:8c:33:b8:f1:b3:10:9f:4a:
6f:05:b4:b8:29:80:c3:31:4a:6d:ef:4c:d7:ab:af:69:9b:e1:
31:54:82:41:ac:62:54:b3:92:68:80:a9:5e:53:14:33:22:10:
06:32:1e:7e:32:31:b3:7a:1f:34:fe:82:83:74:0f:50:f4:32:
2e:f8:c0:a3:4b:e8:a4:1f:1e:8e:16:0c:f1:36:40:6a:04:0a:
5d:32:73:dd:e9:5e:30:bd:9d:33:29:97:e0:f8:c9:8f:f3:6b:
e8:b4:19:04:85:7a:91:7f:14:c8:c0:21:16:54:10:57:f8:43:
c9:c4:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:29 2025 by rpki-client