Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: 2V95DHsco5IMmjUfc0RI2CrULUs4T1cZXn+OyNEsozY=
Subject key identifier: EF:B5:0C:09:75:24:6C:33:C6:48:CC:36:29:5D:9E:50:95:53:6C:7B
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 0197789CB23ADC891810B0C38B7D1065DD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 12:00:24 +0000
Manifest this update: Mon 16 Jun 2025 12:00:24 +0000
Manifest next update: Tue 17 Jun 2025 12:00:24 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: O54dg2qLNmMN/lN0v810a3Rb+y8qPRPxq5X8X8IbUSw=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:b2:3a:dc:89:18:10:b0:c3:8b:7d:10:65:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Jun 16 12:00:24 2025 GMT
Not After : Jun 17 12:00:24 2025 GMT
Subject: CN=efb50c0975246c33c648cc36295d9e5095536c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:3e:71:56:f9:7e:8e:e8:8f:28:5c:25:a0:
c2:5d:ea:18:e0:ad:aa:3d:6f:a0:6e:24:1b:52:92:
ad:ba:17:73:d9:82:fb:30:99:7e:59:b5:89:77:93:
3d:50:dc:f4:da:c4:3d:cc:cb:ee:2e:74:3b:f0:f5:
e5:92:47:c3:b0:cf:f6:48:d8:ba:a2:dd:87:f2:69:
52:c9:80:00:85:63:64:16:8c:cb:39:e6:7a:ea:c5:
2e:ac:37:b7:ea:fb:c0:06:a3:5f:79:7d:64:d7:75:
6e:ed:31:bb:d1:d1:a9:4a:53:3a:93:c2:ba:50:4c:
73:28:f8:01:78:64:ab:71:1b:84:6d:ad:b8:b9:ff:
3b:ad:f4:e4:bc:ea:dc:70:56:0c:0d:08:92:6d:c6:
06:4d:53:7d:56:b0:7f:cc:cd:67:af:a7:09:8a:93:
0e:a2:5c:a9:b4:35:a1:ab:e6:b3:f5:a9:b0:24:fc:
91:01:68:b3:35:9a:f3:19:63:fc:44:1b:4d:aa:0d:
4a:0f:5c:24:18:9d:d5:a6:7f:94:ca:21:b2:51:e8:
98:b6:58:7a:24:c0:f3:0d:45:4a:51:6e:70:3a:e5:
09:6a:12:71:b7:5b:7f:fb:c1:28:b5:28:22:d2:3e:
69:f8:de:b5:78:8c:f3:50:72:8b:0b:24:80:0d:8a:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B5:0C:09:75:24:6C:33:C6:48:CC:36:29:5D:9E:50:95:53:6C:7B
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:d9:1f:e5:1b:8a:c8:6e:ae:ca:84:87:ed:29:32:d0:0b:
36:f8:be:99:c6:8d:01:5e:5a:07:75:c8:3d:90:90:ad:d3:e4:
df:3d:a5:53:f4:42:6f:e2:dd:aa:78:bf:a9:11:46:43:c8:41:
a1:22:82:a9:df:8d:2b:0e:ef:d6:11:e4:51:27:3e:83:9e:e3:
7b:91:7f:73:e5:55:24:cc:c1:b1:4e:d2:90:a4:80:e0:78:f1:
55:d8:d0:10:3c:4a:12:d8:87:f5:a0:74:21:99:05:02:58:28:
aa:86:e7:0b:1b:6d:7e:53:91:77:2e:aa:c7:66:0c:61:b8:96:
2c:b5:d1:ac:a9:65:6e:67:4c:92:ca:7d:b7:1a:e5:f0:33:f3:
ae:69:83:51:31:41:88:a6:fe:bb:c6:25:f3:32:6c:36:2c:36:
9f:87:ce:23:ec:8f:c0:58:be:1c:11:13:ca:c8:54:84:c7:dc:
5a:d9:72:52:b2:6c:4d:df:bb:90:78:87:17:e0:23:de:05:26:
84:25:64:f0:15:fc:cc:e0:dd:1f:dd:88:3b:b0:66:17:3c:ef:
5e:ec:a0:f9:9b:87:63:46:4c:eb:aa:f8:80:ac:58:c4:8b:f4:
5d:f7:e8:78:df:a3:cb:20:fe:8f:00:b9:68:f0:b1:89:3e:9d:
72:8f:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:51:32 2025 by rpki-client