Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
File: 52vcVigM5dn89QMlGKfsm2HizO0.mft (raw, json)
Hash identifier: UAPrph0s4RfePFPxD5aUxrTr48nBNSFmSagm+qo9Xoc=
Subject key identifier: 7C:3B:82:62:63:AD:FF:BC:8B:12:D8:5A:81:C1:DB:7C:88:A6:94:CA
Authority key identifier: E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
Certificate issuer: /CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Certificate serial: 01984D41E0DED4713DD2A45A604E6EA609F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
Manifest number: 10CC
Signing time: Sun 27 Jul 2025 19:00:19 +0000
Manifest this update: Sun 27 Jul 2025 19:00:19 +0000
Manifest next update: Mon 28 Jul 2025 19:00:19 +0000
Files and hashes: 1: 52vcVigM5dn89QMlGKfsm2HizO0.crl (hash: VJhGvo3zjyXxl6sZ+byM43KIZ1o4aA3+rFg/VNaONI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:41:e0:de:d4:71:3d:d2:a4:5a:60:4e:6e:a6:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76bdc56280ce5d9fcf5032518a7ec9b61e2cced
Validity
Not Before: Jul 27 19:00:19 2025 GMT
Not After : Jul 28 19:00:19 2025 GMT
Subject: CN=7c3b826263adffbc8b12d85a81c1db7c88a694ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:bf:bb:12:5d:8c:d8:2f:f4:3f:91:04:0a:
e8:ac:38:74:9f:0e:ea:f6:66:5f:cc:f7:f2:c6:00:
9a:3f:05:01:98:d9:32:8a:85:67:58:fd:e9:09:13:
7e:10:e1:b8:d2:79:fb:76:df:e5:09:ff:a5:6c:fd:
10:31:0d:02:24:12:7d:48:5f:05:82:50:bb:dc:61:
59:55:3e:73:be:08:61:e6:b7:04:b0:f3:d2:df:68:
19:6b:e0:65:0c:2d:f8:99:93:68:94:27:9a:80:84:
74:8f:a9:bd:71:d6:43:31:9d:a5:2e:91:70:53:fe:
36:fa:dd:3d:89:0c:ed:a5:4b:91:65:d1:6b:29:9d:
72:a9:cf:87:d7:68:d4:33:61:fe:5f:4e:6a:c8:9b:
f4:4c:34:ed:d4:27:49:e9:04:72:10:6b:11:4e:a6:
35:89:7c:18:d5:70:91:65:cd:cb:80:aa:9a:55:55:
0b:b0:4d:0e:7d:6e:f6:19:11:7b:fa:86:ef:fe:58:
b8:2b:f9:80:bf:60:15:8c:3f:89:0b:dc:9b:94:c9:
ed:67:bc:62:6e:8e:60:1a:6e:14:23:27:fc:a5:38:
a0:be:f1:44:11:3f:c8:01:d1:30:af:45:00:07:4c:
c9:78:69:c5:4e:bb:c5:91:a0:12:e9:6a:4e:ea:c5:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:82:62:63:AD:FF:BC:8B:12:D8:5A:81:C1:DB:7C:88:A6:94:CA
X509v3 Authority Key Identifier:
keyid:E7:6B:DC:56:28:0C:E5:D9:FC:F5:03:25:18:A7:EC:9B:61:E2:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52vcVigM5dn89QMlGKfsm2HizO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3ddd6a-3025-4196-84c2-f1c24a8139db/1/52vcVigM5dn89QMlGKfsm2HizO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4a:ca:fa:68:3a:8a:a6:fb:d9:f6:47:94:e6:03:4a:b6:dd:
ee:25:2e:af:1b:1f:c2:17:17:ab:d1:8a:b9:f7:92:d8:df:ff:
96:88:0f:2b:25:77:2c:ba:4c:62:ab:01:c7:c5:19:69:f6:a9:
25:ce:48:b0:20:a5:06:ae:a3:07:c2:46:fc:fb:3f:31:ec:10:
59:20:20:ac:dc:97:6b:ba:42:5d:fe:6e:b1:cf:05:55:6c:7d:
4b:4c:93:f5:22:8e:99:24:dc:15:fc:fc:9a:58:03:e3:7c:a0:
da:04:ba:82:99:6b:73:81:2b:86:8e:48:d7:39:e1:e4:46:fe:
80:97:b7:5c:25:29:89:fd:8c:4b:49:08:77:4f:f9:a5:02:70:
9c:41:84:0d:7d:e3:35:92:37:ac:67:59:87:86:6e:71:1d:ad:
3f:70:82:f8:84:f2:dc:76:20:cb:d9:0a:b3:be:93:2c:b1:7e:
6d:87:24:bb:ee:36:4e:ee:0b:60:c4:99:5d:cd:cc:b2:f1:89:
d5:c3:2f:5f:55:c5:86:46:2f:b0:40:07:78:f8:ad:38:a6:7c:
ce:0a:66:83:1a:c7:20:a3:09:fd:28:61:b1:8b:b9:01:77:3d:
80:9a:43:d8:d2:3c:a2:6c:72:3a:6b:45:e2:77:16:be:2a:83:
c0:54:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:06:50 2025 by rpki-client