Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: rJVdjAHmJGJLwzjhCQnTfZS+KX15lgCapD2pn6NVM5Q=
Subject key identifier: A0:B5:A2:7B:BD:BF:9C:D0:28:CE:6E:9F:B2:4D:2D:2E:EA:35:49:62
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01974A0CD03CEAE44C9EAA8D74DB60B7649E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0410
Signing time: Sat 07 Jun 2025 11:00:42 +0000
Manifest this update: Sat 07 Jun 2025 11:00:42 +0000
Manifest next update: Sun 08 Jun 2025 11:00:42 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 25H92PLiezJDtGTzLC+QpT4Ip6/vGmM+ErATKKlaV7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d0:3c:ea:e4:4c:9e:aa:8d:74:db:60:b7:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Jun 7 11:00:42 2025 GMT
Not After : Jun 8 11:00:42 2025 GMT
Subject: CN=a0b5a27bbdbf9cd028ce6e9fb24d2d2eea354962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:84:33:a5:2c:9b:29:53:d4:10:74:ca:9a:
95:29:c2:47:de:b0:5a:c5:2b:54:55:85:b4:63:d6:
52:04:bd:2e:3f:6d:f2:16:74:00:6d:41:5b:c9:52:
14:7d:22:d1:b1:f1:83:82:8d:28:23:32:11:fa:d4:
66:15:db:9b:60:2d:60:91:24:5c:74:4e:18:ac:ed:
dc:7a:c7:97:90:9b:a1:38:bf:07:34:71:37:f2:5e:
6b:07:08:ef:b3:5c:27:9c:6d:69:3b:d4:5c:f7:38:
3c:05:29:f5:84:b6:ff:7d:23:fa:03:de:e4:23:24:
c3:28:95:99:7a:d6:17:1b:54:87:da:47:77:48:ab:
34:de:6b:f5:7c:10:3a:5d:a6:1c:16:cf:97:69:33:
5e:d3:ed:50:65:d8:7b:4d:ea:8c:06:55:dc:e8:6b:
7b:0d:33:f2:18:54:ce:54:4b:2b:ce:d3:04:f3:06:
ae:7e:7e:d8:54:68:05:49:bb:ed:2e:04:5f:d0:24:
99:d5:44:31:16:62:73:c7:ab:55:21:2e:63:1b:fb:
80:e5:80:ec:19:09:86:e3:51:51:d8:9c:0b:ac:c4:
c3:bb:58:21:63:16:41:bc:2a:92:35:cd:ef:44:7a:
85:2b:83:74:10:ac:44:5f:70:14:7d:5b:d9:67:53:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:A2:7B:BD:BF:9C:D0:28:CE:6E:9F:B2:4D:2D:2E:EA:35:49:62
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d0:bc:1d:8d:ea:22:f2:15:a3:2a:30:f7:12:80:1c:6e:4c:
1b:29:01:79:44:73:7d:e0:dc:8e:64:5c:d9:57:cf:88:2b:6e:
42:00:ee:93:b0:17:13:de:42:c0:ef:0d:ab:45:16:e2:00:77:
a7:fd:0d:bd:6a:aa:1f:44:d0:82:aa:ed:72:34:be:bf:d2:b8:
1d:ac:cc:a3:4c:40:6d:67:db:56:69:bc:2e:1f:f4:2c:a6:74:
51:f7:8d:c5:d9:83:4f:be:b9:bc:b0:dc:6e:db:8b:c4:60:d9:
cf:c2:da:4e:85:00:c0:64:ca:4e:b2:2c:d6:26:66:aa:ba:b3:
e0:fb:fb:5d:8a:1d:d2:24:bd:be:f0:3e:b2:cb:b2:0a:8d:c3:
fc:0a:49:10:75:4c:c3:0e:26:db:9d:bb:ea:dc:b1:51:a2:44:
3e:59:11:3e:45:b4:08:00:f3:cc:8d:e2:80:71:06:cd:2d:e1:
9e:df:d1:61:68:27:ce:b8:60:71:e0:bc:06:f5:db:37:fb:a0:
e9:4b:66:92:19:3b:5f:9e:b4:97:1b:c8:16:51:03:f7:b0:7a:
a3:6c:d1:2f:7b:79:82:9b:49:aa:5c:06:a2:27:21:9a:db:d4:
fc:41:73:9b:bf:64:df:ad:23:2d:34:6e:bb:69:44:50:55:33:
1a:79:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:23 2025 by rpki-client