Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: iWIRlMqG40QHNtwiRSNc9NYkgRKGGTBUooUR3+wzjL8=
Subject key identifier: 77:A6:D7:54:BB:D5:70:88:FF:C3:E3:F6:76:1F:DB:E2:FE:4A:60:03
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 019848531FEB08E8DD3524716CBA9574F509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 0249
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: eh689FFmqsP8QiRUN0ADRa1Ohf1VsaPW1nul5jUA8o0=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1f:eb:08:e8:dd:35:24:71:6c:ba:95:74:f5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=77a6d754bbd57088ffc3e3f6761fdbe2fe4a6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:21:95:62:ed:9d:dc:3d:5f:32:81:18:2c:
ea:3a:a1:ad:c3:b3:1e:2e:51:29:f3:fb:64:b8:b8:
08:58:c3:c3:71:c8:58:11:c5:fd:e1:2b:2b:80:2f:
04:36:39:b6:96:6b:b2:ae:01:c1:88:fc:90:4d:aa:
5f:a0:81:d7:48:f7:dc:1f:a9:73:6f:15:15:25:7a:
82:9f:45:a2:90:f7:11:97:1e:c9:0e:32:48:bc:37:
28:01:1c:3c:02:53:1b:c6:04:9c:22:bf:5b:64:3f:
f1:3c:13:f3:72:ee:7d:6f:f5:85:aa:c7:9e:1e:af:
2f:ab:d2:56:9d:50:86:c2:36:21:8b:46:81:91:da:
49:3e:5f:3e:c9:71:9a:5c:b7:e3:86:98:d4:90:0c:
95:f4:3f:12:82:66:14:e6:d0:95:eb:a7:eb:2a:92:
a6:f2:d9:dd:db:de:fa:df:2d:3a:7e:e5:0c:c8:25:
69:2f:41:79:57:58:2a:d4:d8:3b:e9:03:52:8f:17:
c4:34:5c:d5:7f:d5:e9:78:0e:25:27:95:8b:27:45:
4a:17:e8:eb:89:e3:44:06:3f:06:e3:2e:bf:a2:1b:
86:de:1d:b7:db:4d:86:56:13:d6:9f:fd:dc:29:eb:
ad:68:9c:90:49:a3:ab:85:21:d2:6d:a3:8d:13:83:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:D7:54:BB:D5:70:88:FF:C3:E3:F6:76:1F:DB:E2:FE:4A:60:03
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4e:3f:b0:39:d5:1b:29:fa:70:8e:9a:48:fd:87:37:aa:58:
c2:89:9f:ce:b8:1b:98:f2:e6:b4:66:6a:af:4a:c4:bd:0e:52:
da:61:50:c7:61:9a:77:30:f6:07:e3:8a:7a:ed:31:f9:97:79:
9d:fe:16:50:fb:14:8f:95:44:97:0d:6f:a1:6d:92:f7:cf:6a:
fc:46:3e:7a:33:18:1a:e2:fc:d8:ca:d4:bb:63:7d:39:87:16:
1e:ad:0f:fe:96:40:59:39:9a:99:e8:55:e9:24:9a:34:3d:1c:
92:e6:0f:75:b7:18:a3:9e:e3:0d:fa:ef:01:7b:f6:74:81:ff:
40:a5:73:7d:ba:52:da:c9:9a:9e:a9:f9:f0:36:91:6a:63:37:
cb:87:fd:53:5b:9f:6c:db:2d:89:e3:97:b8:13:68:73:04:0e:
f5:b4:bf:60:c8:6c:02:87:86:24:99:ac:57:e9:15:e0:7d:ae:
e5:ad:cb:db:8a:6f:1b:07:b5:a5:a9:a2:14:e4:0a:a4:87:59:
b5:4d:dd:c7:1e:c2:78:22:5e:df:38:32:a1:11:06:92:75:7a:
6c:f1:bb:3e:b6:88:91:ee:08:0c:de:d4:32:60:d5:89:c7:d7:
67:29:3f:d2:b8:2f:8f:1a:71:2c:25:7e:f1:e2:c5:3b:ed:5e:
6a:e8:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:17 2025 by rpki-client