Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: 6lsBPZNHDuphnTBgi7EISa0szHkoGbhXD5Pq4i09MXs=
Subject key identifier: 7E:7F:13:16:CF:8B:16:A0:32:5E:ED:DB:B6:65:8D:4A:E7:4B:F7:6A
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 0197D774D61C6AC936C8EFD920B3C42508BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: 32
Signing time: Fri 04 Jul 2025 22:00:47 +0000
Manifest this update: Fri 04 Jul 2025 22:00:47 +0000
Manifest next update: Sat 05 Jul 2025 22:00:47 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: wMrSKidJIaYui4EcgDn8hpbn/Tl1XY+IAwMGrNfWves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:74:d6:1c:6a:c9:36:c8:ef:d9:20:b3:c4:25:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Jul 4 22:00:47 2025 GMT
Not After : Jul 5 22:00:47 2025 GMT
Subject: CN=7e7f1316cf8b16a0325eeddbb6658d4ae74bf76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:ef:64:42:1c:a8:76:6d:bb:21:1f:48:c1:
2f:1a:c1:e2:b1:99:75:b0:70:9a:a4:93:ff:2b:66:
5c:64:e5:75:08:6a:36:8c:75:39:7e:b0:e6:d2:3a:
37:8e:0d:65:4b:b8:a4:c1:94:ce:e0:a5:37:75:ee:
0f:03:b6:10:d6:e6:27:92:f1:e4:97:43:ff:0e:83:
ff:b7:6e:51:65:02:5f:1e:cc:db:58:e4:c2:39:08:
87:e2:0d:49:f1:93:9c:4b:dc:14:e4:ad:49:4f:ca:
2c:d6:17:39:99:3e:a5:9f:96:ae:3f:45:3a:ce:58:
40:af:3c:68:3b:e5:bf:a8:46:86:17:6e:76:ee:11:
e3:eb:95:69:1e:49:2d:9b:0a:62:29:46:5f:f0:10:
3b:80:b7:97:13:65:c6:84:7a:76:ee:75:88:fa:dd:
93:2b:99:80:86:6b:88:60:2b:a8:50:4d:0a:ba:9e:
a2:92:47:6c:32:88:c2:1a:ea:4a:f2:77:cd:51:90:
78:eb:87:69:d8:67:ed:e2:0a:6c:97:eb:da:9c:e6:
50:70:59:f5:10:dd:3f:b9:70:97:aa:e7:06:27:d9:
0d:24:c9:ca:e8:24:3d:f1:68:82:f3:44:f8:d8:51:
5f:94:d2:c5:2a:a7:41:3e:79:f9:e7:fa:fb:e0:b3:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:13:16:CF:8B:16:A0:32:5E:ED:DB:B6:65:8D:4A:E7:4B:F7:6A
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:9a:69:29:fa:8a:c0:b8:2b:cb:ab:7b:0b:36:26:07:13:
9a:79:f3:5e:b3:6d:06:61:ca:45:07:bd:e5:68:21:a1:d4:b5:
e7:aa:58:b1:c2:6f:32:6e:6d:70:f5:7c:78:fa:44:f4:c8:d4:
f8:28:41:8a:ea:9c:e9:12:40:1f:7b:25:be:df:e1:83:51:01:
7e:39:ce:bc:dc:34:a4:b4:27:99:8b:8e:ca:29:39:5d:d9:08:
b5:55:58:2b:7c:b2:3a:a4:f2:fa:a7:94:0b:60:ab:b6:af:eb:
97:53:72:3c:d2:bf:05:54:8a:8e:b7:f3:b1:f9:c3:c7:96:ba:
60:35:61:00:91:9c:a5:3e:ba:4a:7b:0b:eb:78:0d:44:75:fd:
66:09:a7:45:37:96:ae:31:60:1a:05:68:aa:55:f3:1d:d9:de:
e6:59:1b:37:e0:a8:94:69:34:a5:c5:5c:4b:5d:da:f8:7d:0f:
60:8a:f8:42:3d:46:c2:2d:62:8b:e2:ea:d1:74:2c:73:38:bb:
7b:f9:37:20:15:be:85:a6:45:e0:34:b7:89:b8:7f:33:d2:2e:
b8:f5:47:95:c8:20:62:38:69:b2:de:ca:0c:e7:1a:04:d2:69:
62:3f:f4:e3:b2:8b:b3:24:cc:8b:d7:d2:97:2d:18:c9:a4:ee:
ff:71:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 04:50:22 2025 by rpki-client