Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File: 7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier: XDYjDm+Vz5s1QrWc4QQsqTihjm6vGf3zhN80hrBEJII=
Subject key identifier: 24:52:ED:F9:14:69:DA:84:00:BB:BC:E2:F2:E3:7F:DF:DA:89:40:B9
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer: /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial: 0198733D6D32A712FC722BC2E36F610A946B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number: 35
Signing time: Mon 04 Aug 2025 04:01:02 +0000
Manifest this update: Mon 04 Aug 2025 04:01:02 +0000
Manifest next update: Tue 05 Aug 2025 04:01:02 +0000
Files and hashes: 1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: UI1c+poHchpVXm19lf5+QTDlWEvwu7Nvek5z8HQDJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:6d:32:a7:12:fc:72:2b:c2:e3:6f:61:0a:94:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Validity
Not Before: Aug 4 04:01:02 2025 GMT
Not After : Aug 5 04:01:02 2025 GMT
Subject: CN=2452edf91469da8400bbbce2f2e37fdfda8940b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:9a:09:e4:19:5a:e4:3a:fa:86:c2:f8:82:
43:f3:7f:79:6d:cb:c1:8f:fa:8e:c4:27:33:f0:35:
b8:95:23:fd:63:81:1e:2d:00:ae:28:3a:af:3c:94:
1f:46:f7:04:09:21:a5:86:22:80:62:b1:b4:78:19:
7d:5d:0d:82:47:dd:37:36:a2:4f:ed:65:51:c2:13:
6c:f6:10:54:af:bd:20:27:d6:53:4a:79:01:e3:31:
59:3b:86:ca:13:89:6c:01:12:6b:98:7a:3d:f0:0c:
35:c9:85:89:e4:af:b4:76:68:62:0d:c4:56:1e:b4:
cd:b6:9e:78:48:1a:b9:fc:87:8b:80:e9:44:85:fc:
c1:3e:f8:38:e9:58:10:49:8b:da:1c:cf:58:07:a1:
bd:87:de:df:fc:2a:63:71:64:df:91:6a:27:98:51:
c7:eb:7a:3b:09:b8:3a:1c:7d:9e:93:23:fe:9b:0f:
bf:26:ab:f1:0e:62:5b:0b:6d:2d:d6:64:71:55:e9:
ed:26:a7:fe:78:db:b6:eb:e3:d3:24:cc:a8:eb:54:
b4:19:22:5f:80:67:b2:aa:30:bb:e3:a9:94:89:5a:
c4:2a:75:71:08:f1:34:9b:7c:2c:36:0e:2f:77:a4:
87:84:95:22:4b:63:c5:8f:4e:95:bc:ed:d2:a5:ba:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:ED:F9:14:69:DA:84:00:BB:BC:E2:F2:E3:7F:DF:DA:89:40:B9
X509v3 Authority Key Identifier:
keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:f2:d3:ac:8f:e0:85:f3:43:ef:a6:24:1b:ca:81:a1:6b:
bc:26:d6:bc:55:f9:11:d8:cc:fa:36:2d:05:f3:b5:9c:a8:94:
c5:0a:d5:37:94:96:a6:f3:95:07:5e:5f:ce:78:da:8a:92:94:
3b:f5:0f:37:ee:05:41:ec:0d:95:24:25:7c:85:8f:8a:b9:32:
0b:fc:61:d2:d6:ed:7c:cf:ce:18:c1:c4:7d:b1:4e:ba:f0:97:
59:ef:f9:66:4c:f7:fd:72:b8:03:61:40:5b:5b:99:21:0c:72:
db:b5:83:06:87:f4:dc:cf:56:48:a9:c7:47:24:e2:85:2d:ad:
14:71:a5:9a:e1:bf:f4:78:bf:14:30:3c:e6:c3:fb:8c:38:31:
c9:56:bd:67:88:6f:4c:bd:4d:9d:ff:23:8f:fd:8b:3a:75:44:
1e:d2:91:fe:af:13:65:09:6c:6b:11:00:41:2c:97:ef:b3:6b:
ca:4e:14:25:fd:07:a3:72:d6:7b:4f:72:41:91:b1:a7:57:26:
ba:26:81:68:35:df:0d:c9:c1:b5:77:be:51:a6:a1:b3:3b:d5:
d2:3a:8c:07:eb:63:4f:3a:87:cc:3c:57:f8:dd:3a:2c:c1:66:
89:68:10:65:fb:62:bc:35:0f:e4:4d:ea:42:8a:9b:6b:95:fd:
ba:44:d5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:21 2025 by rpki-client