Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: Vk+0dArSGTNdKoMDlpZqmKIPr7izQc0y4KMzF4gHGhE=
Subject key identifier: 07:16:65:62:95:A1:9B:EF:15:22:13:E2:21:0C:6C:B1:A1:26:49:4F
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019849D313D9B6BDA8F6FC904B0DCFC00D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 03:00:26 +0000
Manifest this update: Sun 27 Jul 2025 03:00:26 +0000
Manifest next update: Mon 28 Jul 2025 03:00:26 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: 4IFjJn/vR+8x94tRzioQk0VLYy2WGAI3qhexQj9srk4=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:13:d9:b6:bd:a8:f6:fc:90:4b:0d:cf:c0:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jul 27 03:00:26 2025 GMT
Not After : Jul 28 03:00:26 2025 GMT
Subject: CN=0716656295a19bef152213e2210c6cb1a126494f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:08:2b:1d:de:f9:b5:b1:e7:1f:01:f4:63:
6a:37:c0:5c:72:40:4f:aa:98:9a:e4:d1:7a:9d:bf:
36:ef:a3:cc:5d:60:56:a4:5c:8a:1c:45:1c:d3:3e:
bd:7f:00:01:8a:8d:af:54:9e:48:f9:59:9b:ee:de:
5f:8e:1e:77:53:d7:6e:f9:a6:f1:33:88:a3:f2:e7:
f4:ca:de:80:a0:51:0d:23:41:84:61:59:23:92:27:
d6:65:3a:58:8b:0c:11:69:97:5c:39:3b:65:d0:b6:
de:ee:e7:b0:9e:66:2b:ce:b4:44:2d:a0:f4:a3:a1:
84:23:56:ee:32:04:2f:c4:6e:f8:4d:21:e3:77:c5:
a0:b2:a8:8e:54:cb:15:11:ca:8a:db:73:d1:2d:ab:
12:5c:ba:0c:ee:a2:5c:d6:05:73:f6:0e:75:f3:70:
28:a0:c9:fb:22:93:db:a9:29:79:df:d2:7b:6c:cb:
f0:f3:97:18:1e:e2:57:44:28:1c:57:bc:25:83:48:
23:61:3b:a6:9d:e1:04:53:fa:4f:c4:88:83:75:e4:
18:6c:52:71:ff:e9:fd:e6:df:62:de:b0:35:4a:f7:
95:90:67:8f:6f:c3:0c:90:cf:44:3f:e7:a3:d7:57:
1a:ae:44:4d:eb:a8:c6:6e:90:1f:0f:39:8e:8b:de:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:65:62:95:A1:9B:EF:15:22:13:E2:21:0C:6C:B1:A1:26:49:4F
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:77:a3:2d:72:fd:61:7e:b8:bf:3f:38:c3:9b:1a:cf:84:8c:
b3:ff:72:14:59:a4:63:ba:24:5a:74:ab:55:f5:88:26:13:1f:
a3:43:8a:4b:f9:89:21:6e:6a:38:cb:a7:b8:7a:9e:3b:75:36:
22:92:75:70:a9:97:b0:b3:0d:a8:09:a7:1c:69:cc:2f:fd:d7:
b8:8f:42:6e:21:15:dd:42:fa:36:e2:61:b4:e8:86:fc:3e:98:
1e:5d:da:25:13:e6:e1:38:15:96:b2:c3:e9:1d:7b:bf:62:25:
c6:76:1b:39:e0:b3:e9:8d:18:7c:68:e0:21:04:e6:b5:6d:c5:
d6:b5:1d:a8:08:77:fa:d0:e9:13:0f:89:3a:2a:4f:74:ec:1a:
7c:75:b3:38:f8:00:72:04:a3:7d:da:9f:0c:bf:ba:d7:2d:00:
06:e7:8f:d1:07:9f:09:7d:1c:15:c7:e9:a7:37:27:cb:4f:d7:
42:50:cb:16:5b:50:96:32:94:a5:d3:78:ce:ec:91:ca:c9:37:
49:5a:80:9b:6a:48:9b:86:1d:9c:2d:48:fd:0f:29:41:6b:34:
d3:06:de:08:42:c7:c1:ec:d8:3b:71:68:73:26:3a:44:e0:cb:
68:c3:62:75:fd:fb:33:40:52:09:51:0b:db:24:40:83:06:60:
5b:30:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:56:41 2025 by rpki-client