Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: Qaya22B3ojNH5vNFHEIWOyeALcQksWMWT0MHO9Foe6c=
Subject key identifier: 81:8C:2D:9B:F5:AF:23:44:14:C0:F8:E1:A0:D3:4A:83:A2:48:17:2E
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 01976D067A2BDC452655069403DB2BF82827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 01F0
Signing time: Sat 14 Jun 2025 06:00:30 +0000
Manifest this update: Sat 14 Jun 2025 06:00:30 +0000
Manifest next update: Sun 15 Jun 2025 06:00:30 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: JjjZrQzUjZhb6ZDdy0+crthfS5VGx2CaVO4Qg44NpXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7a:2b:dc:45:26:55:06:94:03:db:2b:f8:28:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Jun 14 06:00:30 2025 GMT
Not After : Jun 15 06:00:30 2025 GMT
Subject: CN=818c2d9bf5af234414c0f8e1a0d34a83a248172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:3d:c7:40:63:94:53:1d:66:c2:da:cd:33:
a2:f1:bd:d1:ee:df:04:ae:54:ec:b7:43:70:3d:6f:
b3:82:c4:8d:f4:82:75:83:0f:50:b7:64:94:a6:f8:
8e:7d:8e:2a:49:b8:53:9e:5e:4b:af:32:1f:b2:b9:
8d:2a:49:9b:ce:ee:18:3a:b7:ba:c5:f9:12:42:2b:
93:d4:20:1a:d3:be:f1:87:26:32:e7:05:54:90:10:
f1:67:1b:e4:22:38:29:fc:f0:65:35:bd:ab:91:2d:
df:7c:00:3c:98:54:0f:e8:41:42:77:66:9d:46:fc:
02:84:42:6d:0d:5b:02:59:a3:27:96:e9:e2:54:0c:
d8:82:76:c1:6d:cd:7a:a1:0c:8e:ec:f9:b9:14:3c:
c0:d0:b5:03:03:a9:a1:9d:dc:70:75:8b:b8:ff:19:
cd:d5:85:e6:b3:59:6c:07:a2:4a:63:07:b1:f6:b7:
16:03:be:1f:59:f2:d7:6f:90:c1:5f:c1:ac:02:3c:
53:74:71:9f:eb:bd:80:60:a6:1a:d3:1f:c2:d7:18:
66:e1:e2:19:9d:99:0f:a1:3d:53:08:09:26:ed:1c:
58:a7:98:0b:14:7b:37:5d:de:f3:c1:ef:d2:a6:d4:
08:dd:18:47:01:7c:53:26:31:92:af:b9:c4:87:f3:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:2D:9B:F5:AF:23:44:14:C0:F8:E1:A0:D3:4A:83:A2:48:17:2E
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b9:d5:28:1f:87:12:a6:01:6d:14:fa:d3:34:db:bf:0a:eb:
b6:8c:26:86:98:7f:30:09:56:eb:66:ad:6b:52:0d:f8:49:ad:
ac:f7:be:6a:50:9b:91:e8:78:60:2a:e7:55:b2:99:88:e4:18:
b5:ad:cf:99:76:5f:16:98:b3:70:3e:eb:5c:87:72:f8:b1:1b:
82:b6:ae:b4:0e:b6:a4:99:e4:d8:50:08:06:d2:c2:fb:62:60:
87:53:12:d7:71:46:f4:7c:c4:3a:26:d8:21:84:71:14:b9:11:
4a:ed:74:7f:ac:cf:96:5b:ad:98:85:9c:c6:0b:07:4e:55:3b:
48:e0:c4:ec:20:61:f2:c7:5c:8d:15:54:6d:6b:6e:98:6f:8b:
6e:c1:f3:43:f7:3f:94:04:54:ff:e0:c5:6d:0b:03:5a:85:33:
90:4c:3f:0e:ac:86:83:45:17:3b:81:5a:2a:e1:ee:a9:10:15:
42:93:14:88:b6:f8:1e:9a:08:62:e2:e6:f7:9a:06:94:3b:8e:
5c:9e:c8:dd:5d:be:7c:f4:67:76:da:2b:d8:3f:9a:13:1e:34:
2a:a3:4c:38:7b:15:f5:06:d7:9f:d5:ba:db:6f:6f:fc:67:83:
77:5e:d7:21:d3:56:40:92:53:c7:1f:a7:e2:07:3d:55:ac:fe:
a8:54:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:22:16 2025 by rpki-client