Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: dkvPMHydwvX5xpfXhpHHuidq0arBYsnP0FXqEPy1W8A=
Subject key identifier: 33:A9:2B:86:A6:E5:36:BD:1D:3A:74:D9:AA:CC:10:EF:F0:03:30:3E
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019844ACB25272A35A574701824F3944C3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 03:00:25 +0000
Manifest this update: Sat 26 Jul 2025 03:00:25 +0000
Manifest next update: Sun 27 Jul 2025 03:00:25 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: dHTp4hzFoD0sTZZm+FD15hT8y6WwIQ/CFE8UBm/iLj8=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:b2:52:72:a3:5a:57:47:01:82:4f:39:44:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Jul 26 03:00:25 2025 GMT
Not After : Jul 27 03:00:25 2025 GMT
Subject: CN=33a92b86a6e536bd1d3a74d9aacc10eff003303e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:3b:c5:b2:6a:f9:65:92:26:f5:19:f7:2b:
d4:e7:3c:0f:f0:cb:f8:78:0f:da:37:dd:d3:1a:2d:
db:ad:a7:32:4b:8b:f6:38:ce:d7:7c:30:4f:86:8b:
fe:1c:03:2b:4f:8a:fa:57:16:98:a2:df:b8:e6:c2:
05:d7:96:35:a9:d1:ca:25:31:db:66:8a:bd:0c:41:
de:3a:83:bd:e7:a0:40:db:17:92:57:ac:a6:1a:74:
e9:9f:57:88:c7:0a:4a:06:2f:58:28:db:d2:04:19:
21:0a:3e:25:84:a3:2a:19:a6:7b:c9:e3:4c:c2:53:
fe:88:16:f1:76:68:6c:78:a5:58:9b:59:b3:c5:b5:
0f:b5:96:f1:53:43:8b:66:18:f0:ed:9e:7a:1b:ef:
13:63:a1:40:97:dc:df:a6:8b:e2:21:a7:ca:8b:cb:
3e:67:85:80:32:77:99:e0:99:2b:f3:8a:75:34:34:
3d:06:99:38:63:a8:73:e4:53:36:41:83:80:5e:9b:
69:43:ef:d4:a5:33:18:b6:1a:59:88:95:e4:79:df:
27:ff:7e:21:16:61:fd:ee:cd:6a:44:b1:18:12:2a:
95:78:b2:07:9a:c5:f6:64:32:a3:78:b7:59:73:4e:
f6:90:bc:33:61:45:99:34:55:61:e3:c4:5e:d6:da:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A9:2B:86:A6:E5:36:BD:1D:3A:74:D9:AA:CC:10:EF:F0:03:30:3E
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e9:cb:8c:b0:68:d6:e0:c6:cd:93:29:3c:a5:79:e7:14:78:
fa:9b:18:14:1b:f0:57:01:28:16:6e:0a:7c:9d:f4:b6:f8:65:
aa:68:23:48:29:3f:0b:a6:32:55:b0:1f:71:c0:31:1f:e9:b8:
d7:6f:07:b4:dc:0b:e8:de:cb:8f:7e:b5:90:f8:be:40:0b:65:
78:67:0b:c3:57:dd:3b:60:fa:a0:7e:d2:84:a8:3e:7c:a8:da:
02:58:4c:a9:6c:76:1e:3f:36:9b:82:ca:40:8b:10:c8:b9:35:
90:3b:c6:45:74:32:58:1c:56:c7:6f:68:c1:d4:e7:1a:df:5a:
ef:5e:06:0c:84:45:ba:df:bc:af:8c:65:39:84:67:0b:b0:04:
9b:43:05:49:dd:aa:52:b5:f1:64:96:15:dc:83:39:8a:b4:74:
01:3f:74:d5:8a:1e:ab:cc:41:1c:4a:93:82:b5:57:ac:23:c3:
cb:e9:44:77:7d:6d:9a:c3:27:33:5f:df:57:12:ee:dd:df:64:
4c:e5:c9:41:d7:22:cc:ad:b0:24:b3:44:33:6c:01:4a:02:84:
15:dc:8d:05:4d:94:c1:36:90:88:9e:ce:32:79:8e:95:56:84:
5d:2b:a5:49:56:dd:9e:b8:b7:b6:fe:21:c5:5b:71:de:16:16:
27:d4:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:26:12 2025 by rpki-client