Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: hpPZymjGRB7PI8qrfeUeU6JCPBwSS+0wJDjwi8xYeY0=
Subject key identifier: 1E:7C:F7:C6:CB:35:4A:F0:98:89:C7:8C:5C:52:0E:17:72:E5:F5:A2
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 0197481E1155F87FBCFD5FB8BFE07A29EC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 03E9
Signing time: Sat 07 Jun 2025 02:00:19 +0000
Manifest this update: Sat 07 Jun 2025 02:00:19 +0000
Manifest next update: Sun 08 Jun 2025 02:00:19 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: eg2Bvdg0Sa+puuzYKy80RdAY1OxWa8WZzWmto2TMZ8U=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:11:55:f8:7f:bc:fd:5f:b8:bf:e0:7a:29:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jun 7 02:00:19 2025 GMT
Not After : Jun 8 02:00:19 2025 GMT
Subject: CN=1e7cf7c6cb354af09889c78c5c520e1772e5f5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:a1:7a:d1:dc:ba:4c:a4:61:fa:eb:56:b0:
20:e7:96:50:95:4d:19:8d:50:27:52:e8:86:9f:95:
7e:c9:3a:bc:91:ac:36:68:73:2e:f1:f4:e3:a1:52:
93:08:b6:92:51:bd:3d:0f:96:4d:b3:69:ef:61:2d:
a7:bb:5e:2d:d2:4f:80:2f:b4:7d:c4:1f:7b:f6:9e:
a0:de:13:23:35:f5:2e:bb:cc:33:98:a0:fd:32:3c:
e8:a1:a6:1a:c5:70:3c:45:18:f7:6a:61:33:aa:7c:
64:54:4e:1d:23:a2:39:45:fd:ed:a6:63:7c:d8:4e:
ad:55:71:41:b4:d8:bc:b2:34:8c:a7:e6:53:a7:c1:
b9:72:5d:0c:ac:bb:77:1f:b4:05:f2:88:d0:e9:83:
d8:1d:be:ee:31:3c:97:b5:45:42:39:2c:86:fd:e4:
46:3c:fc:4f:99:7e:d0:95:e4:5d:54:ba:42:73:d6:
31:29:f3:03:b1:fb:c5:ca:55:2e:1b:e8:65:cf:3c:
73:64:22:65:c8:29:5d:6b:61:18:89:a7:4b:47:0e:
d9:23:d3:fc:67:21:6c:69:01:28:64:b2:aa:bf:04:
74:f8:1f:16:f3:78:8c:70:c9:d8:98:26:f9:1f:18:
cf:b7:5d:2f:b3:0f:bd:3d:a0:ff:2f:42:ca:91:55:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:F7:C6:CB:35:4A:F0:98:89:C7:8C:5C:52:0E:17:72:E5:F5:A2
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d1:1d:8a:5a:b6:bd:e9:d7:53:d1:03:d1:32:df:36:b0:35:
a4:2a:39:b8:72:18:a3:86:de:de:e6:90:2c:5c:6a:39:d3:70:
d2:ee:e1:e6:ba:1b:7b:33:99:8d:19:e8:c7:b1:ed:d0:b3:a6:
d0:b8:a0:da:10:cf:3d:94:dc:7e:1d:d4:b8:b6:c9:2e:59:16:
ae:79:7a:0a:80:ba:ac:7f:5b:0d:c0:50:5f:04:6c:2b:05:b3:
52:07:e0:3f:fd:ef:a9:1c:20:aa:71:d8:1a:76:10:e4:60:bf:
3f:50:d1:a3:cf:90:c2:f2:86:fa:ca:b5:cb:eb:ba:07:ca:01:
e0:f9:52:f5:f5:59:a2:66:af:3f:60:e8:91:ac:07:54:36:84:
7c:25:19:ae:05:bd:a1:a0:3b:4b:7e:e0:af:72:16:49:2e:3f:
98:d8:61:1c:84:36:33:fb:3d:69:82:2b:b7:82:11:fc:7a:a9:
ce:7d:9c:11:78:3e:ac:c5:7f:09:bf:29:da:68:87:6c:23:90:
4b:97:83:68:34:3e:66:b6:6d:72:52:60:7b:4a:a1:c9:e1:05:
7f:fb:ac:65:f7:a3:5d:09:21:d5:93:07:16:cc:80:61:8c:76:
b0:4f:19:47:38:bc:e8:33:f1:05:47:72:8f:2d:83:b9:12:84:
95:1b:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:07 2025 by rpki-client