Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: JGGMUSqO2cIFMIh8k9a+Xof3hdXFUKW+qnDkPZ9802s=
Subject key identifier: BB:9C:85:63:DD:D0:73:E3:C0:1E:94:70:1D:89:A9:74:BC:65:82:84
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0198E1F5ED736AE69C1B3AC8152790ED0FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 1651
Signing time: Mon 25 Aug 2025 16:00:47 +0000
Manifest this update: Mon 25 Aug 2025 16:00:47 +0000
Manifest next update: Tue 26 Aug 2025 16:00:47 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: eMQbhhCKNWIBk6VaLgFk7s8FufqEeTnzDJOpsLHj5s8=)
2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:f5:ed:73:6a:e6:9c:1b:3a:c8:15:27:90:ed:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Aug 25 16:00:47 2025 GMT
Not After : Aug 26 16:00:47 2025 GMT
Subject: CN=bb9c8563ddd073e3c01e94701d89a974bc658284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:fb:17:d4:1a:c2:ce:c2:0c:d0:46:8f:d7:
bd:dd:d3:4b:c7:bb:0d:bc:b7:64:dc:be:8d:f2:17:
50:a6:0f:08:af:44:e7:35:e4:58:b5:a9:b1:da:af:
24:c9:1e:db:7b:57:69:6d:e4:f3:fc:fd:7d:81:9b:
00:46:c6:b2:67:90:d9:9c:f3:f1:e8:65:9c:f4:fb:
57:ca:95:e1:44:c6:39:89:4e:7f:ac:cf:a6:44:6f:
49:32:4c:43:5f:48:ea:d4:69:87:0f:c6:6c:65:5a:
7f:a4:c9:80:f4:c6:f9:e7:25:48:12:92:dc:c2:93:
fc:d1:94:72:20:a5:dc:12:f0:91:c0:92:f9:0e:75:
12:48:64:4f:3f:8a:2b:9b:cd:81:67:29:cf:6a:59:
c7:e7:22:c2:2b:f9:24:d6:c7:4b:0f:0e:a0:63:f0:
ed:37:e0:9f:46:25:5d:0d:56:fe:43:83:4b:cf:9d:
38:9d:b0:ef:d7:ad:a2:11:c5:8e:9c:97:a6:3f:35:
91:a6:76:59:13:06:92:76:84:ef:ed:0d:bb:e9:38:
1f:2d:06:38:6f:60:20:c4:e9:1c:a1:ee:c7:89:2c:
3d:5e:1e:a1:c5:94:25:dd:a1:8d:70:b6:c9:01:b4:
4f:73:61:b9:bb:bd:85:52:b1:bd:4f:f3:24:bf:ef:
35:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:85:63:DD:D0:73:E3:C0:1E:94:70:1D:89:A9:74:BC:65:82:84
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:cf:0c:ea:ac:02:1a:a1:3a:03:a2:ca:c3:b8:ef:36:ed:
6d:ff:45:69:d6:97:e9:2a:61:ef:3d:20:c4:dc:cf:b2:95:14:
a6:34:49:bb:8d:e4:45:e5:f0:be:0f:48:a7:0f:f3:a5:f5:29:
86:16:58:4f:dc:7a:d0:f4:d3:00:2b:98:f9:1d:6c:64:18:09:
b5:6d:9b:dd:14:5e:c9:50:ae:d6:c5:c8:30:7e:b1:7c:bf:00:
a4:ac:e0:b6:e4:7e:d0:a8:11:f5:4b:51:23:bf:93:c5:0d:fc:
4d:42:36:ef:8d:9d:3d:49:3f:43:58:38:63:5d:8f:6a:76:68:
c7:91:f8:4d:15:9d:41:a6:e9:24:e0:2e:51:01:a8:57:89:ab:
e1:9f:30:57:27:ae:5c:d4:29:3c:68:7a:53:67:90:69:98:f4:
8d:a4:d7:80:4f:8f:35:9b:04:88:df:10:62:9e:09:c0:c6:6f:
65:55:b8:a9:e2:47:37:40:86:0b:a9:79:54:a8:d9:ee:16:af:
00:59:76:47:af:25:77:70:36:ea:82:a8:bb:ea:11:b6:28:fc:
8c:c3:ac:84:22:ef:50:98:78:8c:2b:33:72:ef:47:dc:38:5f:
bf:78:78:c0:0d:c5:8a:15:9b:33:2b:b8:96:bf:b1:af:c5:cc:
ff:b6:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:56:11 2025 by rpki-client