Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: kVbfrvvssD4+ThWJIHrsxeGjJO8lBlNBiN74XYn4vEA=
Subject key identifier: D9:2A:A6:3C:21:A5:04:1F:06:08:15:BE:1D:12:F7:1E:FC:38:4C:BC
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019921B130B4C5A9DDC340923E8E67ADCFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 02D2
Signing time: Sun 07 Sep 2025 01:01:24 +0000
Manifest this update: Sun 07 Sep 2025 01:01:24 +0000
Manifest next update: Mon 08 Sep 2025 01:01:24 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: KWy8Xufd0EasBE6MugZiOi0BYVReSpRzIrJf4fIC6YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:30:b4:c5:a9:dd:c3:40:92:3e:8e:67:ad:cf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Sep 7 01:01:24 2025 GMT
Not After : Sep 8 01:01:24 2025 GMT
Subject: CN=d92aa63c21a5041f060815be1d12f71efc384cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:ea:39:13:08:8d:19:fc:5a:4a:40:78:49:
d9:7d:41:97:a8:6a:f3:4f:1c:ab:e0:3f:b7:db:04:
9c:46:9b:77:cf:b5:8a:e2:bc:8b:98:8c:d7:b8:b6:
ae:fc:99:6e:6e:87:cc:9d:ff:93:50:d3:52:c7:f0:
f3:f6:12:d5:a2:17:85:aa:0f:56:6b:4e:ad:95:e8:
ff:00:91:52:d4:b6:2e:a2:ea:d8:77:18:b8:93:7c:
03:f4:91:cf:82:69:b9:21:fa:1f:7e:7c:f9:0d:c1:
42:cb:6a:06:49:4d:34:bc:d3:39:f6:63:49:6e:64:
a8:b5:a1:a3:b3:81:7c:e6:5e:60:e8:f3:92:03:5f:
fb:30:61:9b:0f:6d:6f:22:fd:c1:64:6c:be:6d:85:
7c:20:55:ca:ea:db:7c:1c:16:bb:f1:31:d0:71:5e:
f8:ab:28:69:ad:72:8c:8f:cf:69:ed:c7:63:84:03:
7d:3d:6f:e6:d5:7c:e1:40:11:41:e0:35:ff:03:fa:
2f:e4:ae:51:2d:c7:c0:1d:4f:e1:22:2b:13:ac:ac:
70:ce:be:fd:0e:21:f4:94:a6:b4:d0:ba:41:97:90:
ae:2d:74:49:96:99:e8:af:e0:b3:62:3e:48:53:33:
d3:5e:60:88:ff:1f:3a:a3:c8:aa:48:e3:ae:2e:ed:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2A:A6:3C:21:A5:04:1F:06:08:15:BE:1D:12:F7:1E:FC:38:4C:BC
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:cd:eb:3b:f6:ec:99:4d:25:30:47:92:18:81:53:0b:df:
06:2b:8d:78:67:1d:fd:43:ab:d3:24:8d:34:34:c3:a9:9f:05:
c2:32:2f:fa:9b:3f:f6:c9:88:1e:b6:1a:7f:28:64:e9:70:f6:
8e:da:63:3c:e3:8c:13:99:ab:fe:fd:aa:a1:48:73:47:04:f2:
7e:af:5a:45:e7:63:06:ba:97:57:74:37:03:c9:0e:f2:81:73:
54:85:76:bc:72:5b:2c:ce:1f:ca:e8:59:6c:3e:a0:6a:58:8a:
00:d7:18:5f:c6:66:12:9f:42:15:d4:6e:18:46:d6:ba:d3:7d:
51:81:2a:c4:25:12:25:06:c6:78:6a:28:e6:33:23:b1:96:4e:
fb:cc:da:a4:57:8e:7b:8c:1d:b9:1e:58:db:af:c3:33:4d:32:
42:be:7d:c7:0e:c5:7a:9a:5a:2f:e9:de:67:32:39:a4:56:e6:
b9:85:e4:e8:85:52:a0:c9:16:3d:f9:26:24:c0:c0:8c:0e:c6:
94:d1:4c:e6:24:c6:ad:df:da:b2:37:f6:59:56:d6:ff:cd:b7:
56:bd:a7:51:10:0f:87:e2:44:8e:3a:de:c5:f9:bc:cf:68:90:
04:4a:df:78:64:b7:12:ff:23:8a:14:aa:8c:df:22:4f:24:a6:
68:43:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client