Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: epsioE+B5rFjgStduvOFJzkx43FiYeGDEdBAum6lT3U=
Subject key identifier: 17:F1:2D:42:CC:04:96:47:70:C2:07:ED:6A:F3:30:FB:E4:5B:CE:0A
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 01975A5BC47D94A2BA308A970272A92DD0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 1246
Signing time: Tue 10 Jun 2025 15:00:52 +0000
Manifest this update: Tue 10 Jun 2025 15:00:52 +0000
Manifest next update: Wed 11 Jun 2025 15:00:52 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: ezvTujmTGHPRZPTP/YyrAfRVGYjm2NLks/WR8GWlG3A=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5b:c4:7d:94:a2:ba:30:8a:97:02:72:a9:2d:d0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: Jun 10 15:00:52 2025 GMT
Not After : Jun 11 15:00:52 2025 GMT
Subject: CN=17f12d42cc04964770c207ed6af330fbe45bce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:b7:a7:e6:07:08:3b:a9:25:43:42:83:b7:
9c:67:55:d8:b5:cf:98:1d:e7:8e:7e:81:53:36:32:
e5:ae:0d:84:e4:d2:63:01:5c:c2:fa:82:98:37:66:
3e:af:0a:ba:62:20:98:4c:c2:e1:0d:5d:9f:79:b6:
17:10:48:44:88:b6:b6:f3:fd:a0:cf:a5:10:67:0c:
67:9b:74:b2:a4:f9:f1:0c:38:dd:b9:1a:5b:0c:71:
94:34:9f:89:90:cc:b4:fc:ac:b6:b2:5f:a6:62:89:
42:77:c1:4d:6f:13:ba:af:69:2d:12:2e:bc:69:e2:
51:f0:32:2d:2b:f7:c8:34:a5:45:e5:ad:15:87:5a:
86:0d:4a:3f:ae:25:10:b5:95:60:6f:bb:24:aa:6b:
55:58:b7:af:16:31:dc:13:96:c9:60:1c:5a:5a:04:
54:73:0d:3f:38:8c:67:55:6e:73:2b:9e:c3:4f:52:
11:46:30:84:75:af:6e:2e:dc:e8:bb:47:3e:fd:36:
5d:93:51:f2:53:4d:51:12:57:2b:5c:f3:a5:75:d7:
ef:d8:1a:75:2f:4f:73:a8:cb:95:46:81:f9:2e:55:
ad:80:96:78:80:a1:f8:e6:3a:d7:5a:37:a1:b5:69:
eb:c2:c4:bc:13:74:2a:b5:ab:44:c4:9f:e8:c2:2b:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F1:2D:42:CC:04:96:47:70:C2:07:ED:6A:F3:30:FB:E4:5B:CE:0A
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:13:c6:6e:eb:c4:12:18:ec:b6:28:f4:05:c0:de:a3:52:
93:2a:09:68:b8:74:a4:1c:18:f3:30:c0:ff:7e:ce:27:da:77:
53:cc:6b:34:8d:bc:02:a4:7a:40:76:9a:08:1e:74:33:53:0d:
6b:73:26:57:1d:6b:dc:59:8e:92:93:61:b3:9d:00:a8:c4:48:
43:2b:64:fe:ec:57:fb:23:30:82:8a:e9:cd:e4:4e:2d:87:53:
c6:af:96:06:c3:85:66:5e:20:21:62:10:10:81:e5:71:08:e6:
86:2b:4c:56:70:ee:c1:31:92:b3:2e:6c:0e:1e:c7:16:8c:df:
2f:d7:ab:35:de:d6:57:51:dd:13:96:b4:b0:53:b1:fe:36:89:
c4:05:a0:6a:ec:9f:b1:10:d2:ab:67:77:c1:9a:01:e8:06:37:
bf:33:2b:59:33:7b:7e:ba:53:64:a3:6f:bc:4d:ae:3c:4d:d5:
e6:66:16:2b:30:71:c2:d6:49:38:88:0c:20:fd:9b:41:f1:7c:
51:b2:55:f9:03:28:24:b8:ad:12:47:e9:dc:01:83:91:ba:6c:
21:1a:51:99:a2:93:01:1c:f3:50:50:a2:52:b5:54:19:b7:42:
d9:b9:6d:ac:a8:48:eb:f3:7f:6f:16:41:82:cb:b6:fa:67:ed:
52:90:2b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:06:20 2025 by rpki-client