Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: zigp2uCBrOyJEyzTIxfihUz0Fx4K1U00ZMxMjs2PgMI=
Subject key identifier: 72:E5:E4:B0:E7:A3:3B:30:48:5D:84:A7:96:11:93:B0:AB:C9:8D:B8
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 01975422DBE1D8DE8B6C0D66604D5BC407EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 10:01:00 +0000
Manifest this update: Mon 09 Jun 2025 10:01:00 +0000
Manifest next update: Tue 10 Jun 2025 10:01:00 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: K8FymkChOhJNEiOnveRBtClBW0KuAEG6ozfRuUG6YTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:db:e1:d8:de:8b:6c:0d:66:60:4d:5b:c4:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Jun 9 10:01:00 2025 GMT
Not After : Jun 10 10:01:00 2025 GMT
Subject: CN=72e5e4b0e7a33b30485d84a7961193b0abc98db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:a6:46:8b:b0:81:a5:eb:ac:40:8f:b6:2b:
44:32:2e:fa:cf:ba:80:de:73:42:65:89:0b:be:8e:
94:d6:b3:59:8c:28:71:c2:d3:47:8b:66:0b:90:1d:
23:03:c6:9c:4e:fe:44:85:1c:ce:48:c4:09:e4:ad:
e5:21:d4:5e:1f:91:c0:a8:75:ec:eb:c0:1b:f9:20:
2f:54:b3:fd:d8:7d:1f:39:bf:91:e3:10:87:07:1e:
a1:c5:db:b8:62:3a:31:16:24:7b:64:51:a2:bf:fa:
f7:bf:cb:a2:93:63:c5:e7:41:56:36:8f:e4:8c:f9:
0f:b4:21:c1:52:0c:a8:7b:c3:e9:fc:ea:a7:66:c6:
c4:ca:1d:88:e2:1f:1a:22:29:bf:42:ac:40:5d:00:
61:8c:33:26:e7:bd:31:b6:64:f7:6a:13:18:e9:e9:
09:33:7f:51:ee:51:cb:fd:93:20:df:db:a8:08:70:
43:64:5f:cd:60:dd:2d:69:cd:e2:5d:76:bf:fd:67:
3a:42:6c:e0:cb:c0:0d:b1:f8:9e:d4:61:2b:32:2e:
11:5b:f2:bb:3d:f7:af:0b:67:7c:af:4f:48:5f:ba:
1b:be:d3:fd:2b:c7:4e:99:7c:e4:75:c2:6e:3d:79:
a6:19:9f:66:bf:d2:d1:4d:68:f8:12:1d:d8:d2:6d:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:E4:B0:E7:A3:3B:30:48:5D:84:A7:96:11:93:B0:AB:C9:8D:B8
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:eb:c6:a0:8a:e7:a1:e3:e4:d0:7a:72:ba:ab:51:9d:d9:
f4:33:8b:a8:2f:0b:d1:b1:ea:6b:56:f7:4a:57:05:78:2f:5c:
d4:cf:10:fd:ff:1e:c8:ab:43:82:d2:eb:7e:39:9f:28:bf:ce:
4a:35:c2:5c:db:9f:4c:72:0d:b7:03:f4:7f:b7:90:55:10:d7:
70:80:9b:30:92:2d:4f:15:60:9a:1b:78:5b:72:c5:c6:41:b3:
40:2e:f4:17:c7:64:d1:58:db:7f:b7:2a:d4:a8:36:24:81:69:
5b:dd:54:e6:0c:d6:af:6f:b6:63:7e:ed:bc:d0:b8:f0:ee:a8:
53:fe:62:d3:31:06:4a:e2:9b:67:75:57:41:e8:d1:32:48:3e:
bc:df:9f:db:1f:2b:ac:50:cc:4d:c3:fa:63:82:23:f7:31:5f:
0b:bb:69:20:aa:e3:ba:0d:d6:05:b3:97:68:e0:5c:8d:50:b3:
1a:1b:e8:c8:0a:eb:a0:ae:8f:c6:b4:ae:31:5e:cf:05:7c:50:
25:a9:7f:4f:6c:1c:bc:86:bf:e2:2c:67:42:47:7e:1f:7e:65:
7d:a2:10:06:09:62:ba:67:a7:88:6e:ba:0d:19:e2:77:a6:7d:
89:f7:aa:85:86:8a:ea:79:b4:45:4f:79:32:c7:a0:6d:a5:28:
0f:a3:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:30:08 2025 by rpki-client