Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: 0Mg4I42+BePFlbE+Kp+LT1QMlMWGGxUTVG2vzXFNQvI=
Subject key identifier: 3B:AD:C9:44:5D:46:8C:29:5D:43:D6:4F:5F:4A:77:86:B3:F8:19:DC
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 0197500EDF2194E9BDADFA3453A5810BA4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0BEC
Signing time: Sun 08 Jun 2025 15:00:41 +0000
Manifest this update: Sun 08 Jun 2025 15:00:41 +0000
Manifest next update: Mon 09 Jun 2025 15:00:41 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: D+Yux8VucSyyvnXHkLqY8G7gz2PeZP9b6Y2+XHMxGM8=)
2: SKNwRQHq8FB4J3GiSrqdAZqx9XI.roa (hash: YDB6Pr5yEfHTfF51Rh24jRXxG46u/SVtTDlhp5pda68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:df:21:94:e9:bd:ad:fa:34:53:a5:81:0b:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Jun 8 15:00:41 2025 GMT
Not After : Jun 9 15:00:41 2025 GMT
Subject: CN=3badc9445d468c295d43d64f5f4a7786b3f819dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:06:0e:e7:95:28:78:03:5c:41:0c:ba:fb:
10:c4:06:c8:68:72:34:47:30:55:d2:66:cf:63:1c:
5b:8a:fb:ec:24:1c:b9:66:6c:33:0c:82:52:cd:6d:
d7:b1:63:4c:87:c5:71:4c:7f:72:29:55:f8:a4:3c:
3a:4f:98:3c:0c:e2:d5:ac:65:99:fd:56:c1:63:2b:
a3:5d:11:0a:c2:45:e5:ce:9e:53:ec:2e:cc:a9:2d:
c9:f0:a5:1a:27:29:0f:b6:e1:3e:11:4a:c2:30:8b:
90:e9:29:89:8c:1f:32:71:a8:ed:af:07:cf:22:a2:
3d:8f:2d:1b:f6:b9:1b:e6:e0:c4:1c:4d:ba:15:69:
64:b1:53:2c:0c:81:fd:74:ae:1e:ce:e1:bc:97:9e:
7f:22:a7:39:30:06:e3:a3:63:9c:70:fe:a3:7a:b9:
07:2e:36:69:a9:09:a0:e3:91:0d:76:54:ad:79:a0:
79:ef:c1:9d:ae:e5:9c:05:22:c9:04:50:75:81:a9:
d4:f0:9e:a7:0b:dd:82:41:82:a9:aa:38:d6:90:d1:
a5:1d:41:39:c7:a9:d6:b1:31:8f:60:20:f0:12:e7:
22:af:88:1d:85:f0:e5:18:85:99:cd:05:63:a0:af:
6b:92:95:ab:ed:c8:24:75:82:03:52:e6:3a:20:e7:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AD:C9:44:5D:46:8C:29:5D:43:D6:4F:5F:4A:77:86:B3:F8:19:DC
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:bc:46:2b:06:a7:5a:89:fb:5e:1a:3b:3a:c2:30:46:b0:
fa:15:12:a2:47:d5:24:ff:c9:4f:cc:d5:ec:b4:40:87:f2:a7:
e3:e9:d1:3e:50:69:ae:bc:14:1d:32:a2:ec:00:2d:be:a6:0b:
4e:1b:b3:30:92:35:94:ec:2e:f6:6d:eb:c5:02:3b:2a:8e:18:
28:9a:67:ef:65:26:95:e0:19:aa:40:c2:9b:9e:20:cc:67:b9:
d8:7b:71:54:90:05:f5:9b:48:37:43:92:aa:b8:6b:97:c2:ef:
30:cf:c8:fa:44:ca:38:4d:9a:3d:da:e9:39:7a:72:a7:84:04:
26:b0:ca:a6:ba:59:af:0b:d6:c3:19:3f:2a:0f:5c:75:e0:d6:
11:79:35:4d:ad:7c:ba:1e:07:b8:c0:a0:c2:f1:f7:21:9d:5c:
5c:ce:c7:ac:03:9f:2c:dc:49:ae:45:c1:64:4c:e7:8e:2e:a5:
3f:1e:b5:21:ee:80:cc:93:f6:de:50:38:37:cd:5c:56:f2:cd:
f6:9f:08:37:54:98:65:e7:70:62:2e:60:b8:e8:e0:00:e1:6d:
e7:34:6b:17:66:c4:38:1d:6a:22:2b:3a:a2:8c:59:51:99:cd:
41:4d:3f:7f:c0:5f:b9:c6:16:c3:fb:0f:64:37:0a:2f:a6:cb:
71:fd:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:26 2025 by rpki-client