Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: KkXWbyckOIsNCypRnYfX1syL7TzLIVSWMMAXl6pqNsg=
Subject key identifier: E9:35:2E:32:5C:34:35:60:E2:C0:21:E0:67:07:83:96:2E:C2:6A:FE
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 019769CEAD5BE3C0E3535688472ECD6EB8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 124E
Signing time: Fri 13 Jun 2025 15:00:41 +0000
Manifest this update: Fri 13 Jun 2025 15:00:41 +0000
Manifest next update: Sat 14 Jun 2025 15:00:41 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: l2WdyqaggieDNjKWzQZ08TPzS+FCPvCTDs+aubOIFkI=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ad:5b:e3:c0:e3:53:56:88:47:2e:cd:6e:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jun 13 15:00:41 2025 GMT
Not After : Jun 14 15:00:41 2025 GMT
Subject: CN=e9352e325c343560e2c021e0670783962ec26afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:ed:ad:c2:7d:39:70:d3:b2:36:4c:b6:8d:
e3:0d:a8:c6:69:a1:b7:18:ad:4b:58:54:33:00:95:
1c:03:c7:32:c5:a6:5e:6e:9a:df:10:58:bb:d2:05:
1f:53:e0:cb:37:4f:11:34:72:12:9a:3a:9c:94:3e:
46:7f:6f:47:b8:44:c1:c9:43:2a:63:3d:a0:bd:da:
7d:ed:e6:e4:24:b9:0c:63:a6:51:37:10:8f:ab:66:
65:cb:31:9d:f5:32:29:49:e8:f5:e6:4b:fc:ff:26:
1a:2f:e9:71:fa:26:4a:44:cd:a4:a9:9e:f0:bf:7a:
9f:e0:68:52:d9:fd:54:6b:59:87:62:bc:92:50:5c:
e5:48:c2:6b:ce:cd:d0:46:54:2c:0f:82:55:e6:34:
ae:93:81:df:5a:04:1b:5b:df:40:2a:59:97:68:9f:
9a:cc:de:6b:16:08:92:10:b6:a6:39:3a:3f:ca:df:
16:d5:b8:c0:fc:d2:93:e1:7e:e3:d4:64:86:2b:78:
fa:d8:8d:e1:f6:7e:76:e4:bc:d2:da:1e:3b:37:eb:
be:8f:9d:d8:43:ee:16:37:81:e4:54:3c:78:3a:6e:
b9:1c:31:7a:df:48:dd:8b:ad:42:1b:e5:32:26:de:
b9:8a:ff:63:64:a6:95:6e:5b:97:19:0a:65:73:97:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:2E:32:5C:34:35:60:E2:C0:21:E0:67:07:83:96:2E:C2:6A:FE
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1d:2b:92:06:c2:5b:ef:60:57:a2:b0:9b:e4:7e:2f:68:07:
60:6f:63:25:ef:b1:c4:e9:7e:f8:54:b5:91:b0:ed:7b:5e:9d:
7c:9c:77:8b:00:2e:7f:21:6e:72:87:d7:e4:9d:83:19:7f:c2:
cb:e9:cf:b0:77:b0:ea:82:74:c8:86:28:eb:4f:4b:77:f2:22:
39:fe:fd:03:65:ea:03:f3:8b:a5:86:fd:db:49:1e:63:94:0f:
f8:51:51:43:36:35:d3:83:32:4b:2a:25:14:84:73:c0:c6:26:
d4:eb:a5:26:2e:b2:f1:b8:8b:2f:04:b7:9b:8a:d2:57:6d:3a:
45:9d:f7:05:79:ce:a0:37:f6:73:eb:cb:43:88:1c:36:19:0e:
d1:d6:36:76:4d:c3:8f:27:0e:e4:2e:5e:88:f8:76:7d:e8:fa:
f7:f7:aa:e4:16:25:8d:22:66:99:85:b8:68:9e:09:94:88:0d:
64:62:67:c0:3b:34:e5:1e:eb:63:74:f3:ef:f5:5f:71:4c:9c:
86:1a:a8:52:d5:14:d7:e0:8d:63:4a:26:88:2b:91:3e:11:d5:
55:d4:a3:39:63:0e:de:a7:5a:99:8d:62:71:e0:2e:5d:f8:35:
9e:d2:6a:9d:fa:2a:36:fe:37:e9:b0:71:3e:3c:e0:d9:9f:d0:
3b:54:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:16:35 2025 by rpki-client