Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: 6XXlL0X9yq+RBIDOKaizZ5pqcjyCHxjVWfdtU4snKfg=
Subject key identifier: 78:F4:1F:A7:2C:2F:A3:33:4E:81:E0:4B:16:14:B7:74:BD:64:7C:AB
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 01984965BDF08966E1C400F69E99155B88BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0AA7
Signing time: Sun 27 Jul 2025 01:01:00 +0000
Manifest this update: Sun 27 Jul 2025 01:01:00 +0000
Manifest next update: Mon 28 Jul 2025 01:01:00 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: cM6I49UKYdN8EXo7xS/5nHYCjX3DrBvy1+5GlHxDqmY=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:bd:f0:89:66:e1:c4:00:f6:9e:99:15:5b:88:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Jul 27 01:01:00 2025 GMT
Not After : Jul 28 01:01:00 2025 GMT
Subject: CN=78f41fa72c2fa3334e81e04b1614b774bd647cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:00:12:3c:64:4f:a9:26:8e:2d:32:3c:e5:
8e:c5:74:87:40:bd:b8:ca:e5:3c:f9:60:44:30:6c:
7b:d6:80:9a:46:84:41:85:2f:7b:ff:78:e3:79:52:
0f:f1:90:b1:6a:ed:84:bb:ba:fb:5b:f5:23:a1:be:
ca:b6:cc:c1:12:d8:d8:6b:b0:1a:8a:c2:e4:c8:1b:
4a:d7:a5:47:b6:15:1d:11:8c:a5:cf:0b:bc:50:27:
48:83:a6:09:6e:aa:e4:03:a3:2b:21:95:eb:f7:83:
22:2a:70:22:d1:27:8a:aa:3c:3e:65:e9:81:67:d6:
79:05:2b:27:62:11:94:fb:0d:c4:f8:67:90:56:e7:
2a:9b:d3:5d:0b:3f:34:b8:ba:ed:bf:02:9b:fa:2f:
e6:a0:26:9a:13:c6:12:6a:63:92:fb:14:05:70:64:
b0:4b:1b:5c:de:31:a8:19:9d:b4:e1:94:4a:e9:1e:
a5:76:69:35:bf:56:17:e3:c7:13:ed:aa:46:f9:e5:
7f:c4:05:d9:ee:7e:af:25:27:b9:79:a4:53:54:62:
1d:35:3d:97:0e:30:cf:c7:75:39:74:d9:ac:35:59:
d2:e1:73:dc:4a:0d:90:c0:65:67:b3:ec:ca:55:ce:
da:9d:71:a4:b5:42:4e:9c:5a:39:9a:9f:8f:63:6a:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:1F:A7:2C:2F:A3:33:4E:81:E0:4B:16:14:B7:74:BD:64:7C:AB
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:23:e5:fd:87:3b:db:2d:f7:d0:c3:2c:24:0a:da:29:73:
3b:5b:ac:ee:93:5c:ca:82:15:84:9b:e5:66:93:4e:12:70:26:
01:73:76:8d:c1:9e:58:6d:99:6e:63:02:bb:0d:75:69:e1:4f:
d2:22:12:6c:b2:54:78:ae:18:05:9f:8a:8e:cf:cf:85:2e:35:
08:33:f6:4d:6f:25:11:7f:1d:d7:5b:34:f0:81:bb:6b:67:56:
ea:d6:8c:64:3e:7e:5e:12:7c:af:d0:b3:95:35:7c:84:cf:f4:
b2:69:a9:fb:d5:bc:dd:7b:46:16:e9:cd:0a:05:f1:56:56:d0:
08:b4:0e:02:c2:47:8a:d4:1b:80:99:2a:7e:8e:e7:7f:27:52:
8a:8b:00:f9:33:72:cd:0d:e2:6e:2d:32:c4:a0:43:14:24:0f:
6c:aa:2c:e2:9a:8a:0d:41:fd:38:1f:73:36:24:89:02:bf:0d:
50:00:00:4c:db:e4:85:6b:6f:40:0e:a6:87:a1:a6:20:97:7e:
ce:7a:f2:84:e6:99:d3:1b:44:4d:c8:8e:e6:04:2f:75:fb:69:
54:b0:38:0f:d3:08:3d:27:08:80:e9:fd:30:c8:ea:24:d6:8b:
b9:fa:ac:7a:7a:2a:3c:d7:b9:85:09:3d:f9:5f:ac:80:88:6a:
01:4f:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:17 2025 by rpki-client