Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: ++it3CNTNykuiTuLwwLVCUSxXy44WGAjOe2p15kvT2Y=
Subject key identifier: 40:49:28:4C:82:1F:43:A0:D1:CB:DC:77:8C:23:D9:D7:DB:F6:13:EA
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 01975791AB2CD9AACFE25EC1358B461C6FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 02:00:53 +0000
Manifest this update: Tue 10 Jun 2025 02:00:53 +0000
Manifest next update: Wed 11 Jun 2025 02:00:53 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: RDMEhaSh+eJ3K0lQkhWDNJg2rE4H8RgEzTdESWDezTw=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:ab:2c:d9:aa:cf:e2:5e:c1:35:8b:46:1c:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Jun 10 02:00:53 2025 GMT
Not After : Jun 11 02:00:53 2025 GMT
Subject: CN=4049284c821f43a0d1cbdc778c23d9d7dbf613ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:51:9a:15:cd:dd:d1:c3:76:4d:96:8b:b4:
9f:2b:d3:f5:97:58:3b:d5:d7:2e:59:03:e6:eb:8f:
00:46:a2:53:19:05:09:1c:ae:f8:f6:3d:54:d4:f0:
ad:d0:25:51:69:c6:45:c2:0f:48:7a:ff:ad:8b:c2:
7c:0d:5c:8c:66:43:59:d8:86:3e:b4:2e:76:c3:33:
32:34:bc:bc:f0:1b:9a:8d:74:71:79:2b:c2:08:f4:
23:c1:69:90:4a:cd:52:fb:aa:a7:e8:21:78:3a:8a:
8d:2c:04:72:ec:aa:33:ce:37:68:27:b5:b8:11:de:
cd:1a:b3:d8:5c:a0:aa:28:fd:0f:8e:f1:eb:56:df:
48:66:ca:7c:18:fe:86:b0:31:08:24:10:94:19:b1:
5c:d4:3b:21:45:04:64:8f:2c:fd:36:48:18:fb:46:
da:56:82:fa:ca:22:4b:aa:c5:45:1e:bd:9a:51:4a:
17:25:49:5b:0a:bf:04:2e:18:45:cd:f7:97:3e:a1:
31:f9:b8:fa:80:2c:d5:3b:d2:a7:8d:f6:d5:2b:66:
fd:95:b8:0c:b8:07:7a:6e:a9:2f:3a:48:5d:ea:89:
d9:b9:69:39:2d:28:40:51:6f:09:85:05:75:07:f6:
e7:75:93:6d:38:96:af:ad:6a:f3:90:d2:85:ec:06:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:28:4C:82:1F:43:A0:D1:CB:DC:77:8C:23:D9:D7:DB:F6:13:EA
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:7b:03:72:94:81:23:62:67:4f:25:b2:07:98:db:09:0c:
7e:64:7d:ef:48:bf:4e:fc:43:ae:79:34:7d:6f:b1:dc:cb:a4:
5b:7c:75:8f:72:bd:33:72:71:b9:0a:15:77:0a:df:c3:db:82:
a1:ff:56:40:2e:26:38:be:75:ab:88:63:d7:4e:8a:ee:0e:17:
04:6a:3a:8b:94:00:c5:2c:c5:08:fb:49:0e:8f:21:2c:8b:da:
28:34:5f:8e:ac:54:42:e1:49:66:15:63:77:b3:97:a1:9e:e4:
61:92:e8:66:04:10:87:b1:bd:ca:8f:c0:b3:9d:52:32:ad:c6:
16:d7:db:25:da:90:13:1c:4b:17:16:1e:91:f1:ae:0e:cf:83:
aa:36:7b:ea:fe:1f:60:22:76:e7:b6:e5:28:b4:ef:1a:0f:5e:
be:ab:cd:80:d2:1a:3b:b5:f4:8f:8b:41:70:3c:47:47:9f:5e:
b9:68:1b:74:be:80:ee:74:26:77:55:1f:e8:d2:f0:46:2b:b4:
66:de:3d:c9:42:58:3e:bb:d8:e4:cb:0a:07:01:e7:9e:c1:3c:
38:f8:ed:81:13:4b:0f:c0:9c:1e:47:53:d5:16:39:17:b8:9a:
34:cb:36:28:a9:28:d1:e6:cf:78:0b:e4:34:65:21:0b:51:c7:
dd:f3:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:35:55 2025 by rpki-client