Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: D+zyTm9TVXeIP5hpV0b8oN+PV8f2YOD1er6miO3GKvE=
Subject key identifier: A6:A1:E2:AA:6F:79:73:A5:0A:AB:F2:2B:DD:4F:66:E6:B5:E4:CF:BD
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 01984A41879D38937C8BBFFDBF5A03DBF3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: HuBBINzdHdGJ9BvqTnFKO7jXnbcEq2p+d/LtomhyXPA=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:87:9d:38:93:7c:8b:bf:fd:bf:5a:03:db:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=a6a1e2aa6f7973a50aabf22bdd4f66e6b5e4cfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:36:19:c5:63:9e:db:ac:18:70:4e:b0:9b:
23:4b:92:56:4e:85:27:d2:80:03:e2:78:fe:6f:b9:
ae:f9:c3:43:bd:5f:d7:af:5f:e0:5a:2f:15:85:23:
6d:d7:37:f0:a1:11:ee:c3:a0:99:14:ef:17:85:e2:
3a:00:89:41:22:ca:b5:56:0a:e9:62:3f:d7:6e:73:
88:77:72:54:05:b7:90:5b:a2:23:2f:bc:d3:da:37:
36:4b:00:46:84:18:d9:1d:ea:cc:68:62:e4:ab:70:
bd:07:8f:a3:28:4a:2f:46:e0:b1:80:42:1a:e1:58:
6a:98:76:af:71:99:f8:be:59:35:32:61:55:1f:50:
ee:cc:9a:d7:2b:4b:7d:c1:f9:6d:9e:cb:de:28:72:
e0:84:25:8d:ae:77:07:d6:be:98:d8:1a:8d:1b:15:
54:c3:e5:7f:6e:7a:f4:1b:3c:d0:26:0d:d4:3f:dd:
34:5c:ca:11:53:5b:19:0a:8d:0b:65:77:fc:7f:d0:
02:ac:24:2d:d5:41:54:a4:ce:dc:7e:18:32:54:ad:
78:5c:12:19:3e:78:40:67:54:d8:df:ff:fb:37:cf:
83:b7:b4:31:df:23:7d:3d:f3:d6:58:2a:98:63:a3:
ef:fd:2c:f4:4a:b7:6c:f4:ad:6d:c1:13:0d:df:e2:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:E2:AA:6F:79:73:A5:0A:AB:F2:2B:DD:4F:66:E6:B5:E4:CF:BD
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ad:07:53:68:ea:db:c9:ef:12:c4:76:74:6a:be:ad:81:c8:
4d:05:30:c7:96:2c:dc:e4:dd:f8:94:a1:7e:af:10:c0:d8:13:
82:ed:13:2d:80:24:5c:dd:1c:6a:c6:c0:ad:15:97:be:95:65:
e4:45:72:18:66:13:bd:22:91:6a:13:1c:63:48:b8:e1:7c:56:
75:dc:2f:f1:0c:e5:cc:03:82:41:ba:38:4c:ab:8b:21:83:ea:
2d:6c:1b:44:15:61:a3:20:18:31:3e:db:39:73:75:9d:6a:ce:
2a:7c:0e:ed:59:61:ff:5f:0f:b5:dd:87:c2:8c:77:64:da:8b:
61:a2:c8:55:9a:33:f4:b0:36:1a:91:f4:77:da:94:56:e8:ec:
a3:95:f6:66:b1:b7:1b:c2:4a:53:2e:33:b8:fe:50:20:13:4e:
c4:83:62:4c:0a:dc:31:c6:bb:f6:08:11:bf:71:67:ff:0f:9c:
9e:80:15:7c:25:a6:f9:ea:16:42:f7:87:11:72:50:86:76:d7:
30:6e:ec:23:ea:fe:80:af:fb:65:46:4a:11:80:c3:01:b2:f8:
fe:93:77:a7:bd:fc:43:c4:0f:8c:e7:6b:a0:85:48:fd:00:25:
d9:f9:5b:78:c1:2a:85:75:90:a3:70:f1:a1:ad:3f:a9:de:5b:
c8:47:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:25 2025 by rpki-client