Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: cyNKdrRA/pEXuEv3hJd2471CJwl508UcsXLwFKBhmco=
Subject key identifier: D8:65:FC:3A:25:46:FE:E7:63:E7:A9:03:85:D5:54:A1:86:53:09:57
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0197665F8EFEA9DE771A7D846558D59194CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 1017
Signing time: Thu 12 Jun 2025 23:00:27 +0000
Manifest this update: Thu 12 Jun 2025 23:00:27 +0000
Manifest next update: Fri 13 Jun 2025 23:00:27 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: b6WXFA65K6JFdtNoWD6YDjFFmnGmw4IbrUQT3l78wPc=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:8e:fe:a9:de:77:1a:7d:84:65:58:d5:91:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jun 12 23:00:27 2025 GMT
Not After : Jun 13 23:00:27 2025 GMT
Subject: CN=d865fc3a2546fee763e7a90385d554a186530957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:13:38:66:b8:5c:e1:61:ff:87:53:30:b1:
c0:97:d1:15:d1:a9:97:39:5b:3f:e2:3d:f5:a7:e3:
aa:2e:cf:4b:a8:a7:56:cf:38:0b:e5:c8:11:d0:30:
fa:e6:50:45:44:01:c3:c7:17:60:6a:57:bc:3d:c2:
c9:b8:84:dd:67:0f:d5:b3:1e:74:ef:34:22:94:3b:
8d:f1:ef:8e:6b:53:10:0d:91:d2:67:83:54:1c:c6:
e9:6a:80:fd:34:b6:f9:5a:c0:bf:69:cb:11:1d:17:
b8:de:10:17:1b:40:63:39:8c:f2:45:2e:ee:c3:ee:
00:a0:ca:9d:ef:f8:80:44:37:92:83:2c:0f:dc:d8:
17:4a:54:0e:3d:5d:d2:26:d4:73:73:85:a6:a7:6f:
78:e5:9c:83:b7:0e:20:7e:23:9b:dc:96:62:fd:ca:
72:91:5b:c1:49:d3:c8:65:20:2c:ae:81:b2:1f:e5:
f6:74:a3:1b:86:bf:a6:08:5f:1d:0c:89:58:d6:ba:
e1:6b:9a:fa:5f:6b:ea:1b:72:81:02:3d:bb:67:55:
67:50:32:51:19:de:e9:c5:08:28:47:5c:4d:02:d2:
59:5f:6b:b1:9d:25:60:b5:10:99:62:45:87:e0:67:
c5:80:7e:52:88:de:a6:41:2c:1f:73:d1:b5:2c:7b:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:FC:3A:25:46:FE:E7:63:E7:A9:03:85:D5:54:A1:86:53:09:57
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:8f:ea:3c:b3:f1:e4:14:a1:07:04:dd:7e:df:81:44:11:
29:82:76:9c:ed:cb:21:c8:9a:6c:7e:45:7e:21:f1:14:e8:68:
66:46:e1:01:18:a7:5c:9c:01:e5:8c:2a:85:49:02:f1:eb:44:
6c:cf:a6:a7:bb:00:0d:e9:ff:15:f7:70:5a:1a:a9:36:62:e4:
c5:0f:5c:e3:9d:ef:95:80:4a:72:87:a3:86:75:e8:f5:28:a8:
cc:34:ae:3c:fd:cd:11:51:2c:56:2a:e2:4b:6e:ff:c2:ec:26:
a0:a9:2a:bd:80:f5:a1:ef:5a:30:a6:55:62:54:58:10:19:83:
fe:69:e3:5a:69:4e:e1:49:a6:84:4b:4b:db:06:90:5c:32:58:
b1:ba:45:42:82:9f:ae:05:d0:8e:77:d4:86:c3:ee:31:6f:bf:
2a:51:0d:07:df:05:95:1f:ff:e4:89:7f:31:a9:a4:d3:c9:7f:
ac:ca:be:9c:57:b6:f1:6f:3f:ce:51:70:e0:14:4d:67:5e:34:
e8:9e:8d:ff:a6:b1:23:22:e3:83:96:31:54:b6:1a:76:46:64:
d8:56:49:49:14:53:76:27:90:7b:85:b6:7b:0d:99:a5:fc:78:
e7:9d:b6:b7:6f:6a:2f:d4:9b:40:0e:81:af:c5:ab:7d:5a:8c:
1e:a4:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:16:24 2025 by rpki-client