Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: cpplyyfbONMuZuyPkK8ydaXuD0wlfgFWOkTEK/JYth4=
Subject key identifier: E0:31:D1:C8:10:6F:06:9C:6C:0A:5D:ED:85:B4:73:11:AF:AF:68:62
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 019853B1FCC404F1BDB23CB678C30C95BB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 08D2
Signing time: Tue 29 Jul 2025 01:00:29 +0000
Manifest this update: Tue 29 Jul 2025 01:00:29 +0000
Manifest next update: Wed 30 Jul 2025 01:00:29 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: u8fCa/d4JyY7rmn0mpqlSXCyDj2wt4KsRNxSUDG4+CA=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:fc:c4:04:f1:bd:b2:3c:b6:78:c3:0c:95:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Jul 29 01:00:29 2025 GMT
Not After : Jul 30 01:00:29 2025 GMT
Subject: CN=e031d1c8106f069c6c0a5ded85b47311afaf6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:1d:59:26:a5:23:b1:2a:b4:01:4b:ad:58:
84:a1:c6:83:6a:86:8c:b1:51:d6:96:83:bd:fb:35:
62:16:bd:3c:2b:b2:af:eb:db:bb:01:c8:4e:2a:b5:
34:b6:0e:65:4a:47:da:17:10:87:a3:9b:16:3c:db:
75:37:5f:a6:65:c6:78:b2:9a:ca:f9:3c:f9:35:c4:
91:ed:17:1d:c5:a4:0a:93:a7:fa:cb:18:7e:1a:cb:
cc:3d:fd:f9:eb:f7:b3:70:6d:67:67:80:82:3a:80:
5b:eb:79:22:eb:e3:dc:1a:0f:05:3d:39:72:b5:7f:
de:2f:e0:7e:10:3d:04:ea:1e:ed:46:41:2c:b4:74:
2d:fb:53:15:eb:9a:f4:27:75:8d:82:fa:08:97:ce:
04:53:99:45:46:8b:19:e7:13:4e:71:5e:1e:84:a1:
c0:f0:e5:62:79:20:76:79:21:ad:5b:83:80:5b:23:
a7:05:41:f4:88:4d:6a:f0:50:a5:c8:d0:13:00:05:
1a:80:d0:63:17:66:58:05:bb:49:45:61:e8:1b:ad:
d5:f1:d9:eb:59:74:5c:1f:df:e3:15:ba:bd:9e:17:
25:4f:79:65:c1:82:cf:3f:55:ea:f7:59:1f:92:89:
77:e9:34:5e:42:99:1b:80:40:02:b9:12:54:bb:67:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:D1:C8:10:6F:06:9C:6C:0A:5D:ED:85:B4:73:11:AF:AF:68:62
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:a2:a8:56:3d:65:09:f9:76:e8:6e:e1:64:e9:66:02:13:
04:33:2c:06:25:38:84:b6:3e:44:20:0a:3f:b7:35:8c:ab:69:
90:ff:db:88:9c:24:fc:24:e6:26:08:b1:5d:0c:65:40:22:c0:
35:d3:d7:53:ac:ed:2f:68:5b:c3:68:f1:49:76:48:8e:2d:1e:
0b:ec:e3:8b:d1:fc:60:7d:94:c5:a8:22:c3:6b:4e:8f:53:07:
69:5e:f5:0d:dc:0d:a3:57:87:d8:e4:c6:1a:10:82:38:4f:95:
f9:f2:28:09:d5:e9:4a:e0:29:c9:49:bd:ff:2a:4d:1c:be:7d:
cd:5c:2c:6f:10:5d:96:7d:70:d9:39:76:c2:be:70:94:8a:9b:
b3:d0:75:ec:fa:a2:3a:9b:13:d6:e6:a5:05:42:30:ca:b7:cd:
ca:9e:43:27:18:95:65:4d:0d:bb:aa:0c:37:1c:ec:49:71:a1:
ff:e5:d9:1d:b1:9a:fa:1d:1c:1e:60:71:12:91:4f:04:7d:4c:
47:ae:1a:2d:03:65:dd:41:b8:86:ad:37:ed:5f:04:cb:9a:16:
af:27:c4:ab:27:ec:80:04:c2:d4:10:c2:33:a2:30:cc:fa:b0:
3a:d8:9e:47:a0:bf:a4:0c:e0:07:de:7a:d0:7a:1f:cb:06:a3:
99:54:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:08 2025 by rpki-client