Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: Qgr1NhvuF4BSLTXYfXrB5fbM4A3O+8YW20Ogp2aXaU8=
Subject key identifier: 27:EB:52:6B:F4:A1:53:D7:84:06:45:8E:2A:35:73:EA:2E:33:AF:D9
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 0198A04E4515B120BC8682F3F6F81C540CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 22:02:20 +0000
Manifest this update: Tue 12 Aug 2025 22:02:20 +0000
Manifest next update: Wed 13 Aug 2025 22:02:20 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: 9PyUlv0WmydGl+CJ9l5UkE5Ja4XY+UKmZqmhXkOWghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:45:15:b1:20:bc:86:82:f3:f6:f8:1c:54:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Aug 12 22:02:20 2025 GMT
Not After : Aug 13 22:02:20 2025 GMT
Subject: CN=27eb526bf4a153d78406458e2a3573ea2e33afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:c9:0b:47:db:d2:2e:27:df:a6:da:a3:46:
9e:96:9b:71:19:ba:aa:e3:51:49:be:94:1c:ff:0d:
8b:63:54:89:74:ff:0c:2d:88:1d:db:83:11:12:88:
6f:57:8d:5f:1d:2f:ab:fd:19:80:d6:6f:1c:cb:fe:
8c:d8:6f:1f:63:48:4c:72:11:23:7f:ea:35:ed:8d:
2d:a0:5f:c0:ce:53:f6:9c:7b:24:95:1d:6b:3e:85:
4d:cf:18:d8:00:2a:db:76:40:64:7a:30:5e:b0:48:
40:ef:e7:43:c8:a2:2e:02:e6:15:b1:dc:fd:77:3e:
1d:60:95:d4:f5:53:23:72:4f:60:15:b0:8d:0f:fd:
bc:e3:1e:17:45:3a:23:8c:a6:5f:ba:b6:e9:39:dd:
b4:e2:3c:17:fe:a2:5a:9d:81:8e:22:76:64:1a:9d:
f0:98:cf:4e:35:b9:f0:22:cc:1d:c0:35:9e:e5:25:
74:f4:0d:d2:a0:5c:83:e6:91:95:a9:44:72:5c:05:
cc:cb:a6:ee:9c:62:0d:bb:16:99:7b:df:6f:3e:9c:
94:87:a6:a7:5f:fc:c1:88:0f:63:6c:ab:c3:f3:6f:
4c:94:5e:01:3f:2a:dd:17:d3:92:26:50:77:54:22:
ac:44:25:c2:dc:81:93:10:4d:60:ce:c9:45:9c:3a:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EB:52:6B:F4:A1:53:D7:84:06:45:8E:2A:35:73:EA:2E:33:AF:D9
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:88:c2:93:0f:4a:62:7a:72:84:2b:81:b3:51:06:42:07:90:
ab:24:3f:af:f3:78:8f:82:27:70:d1:02:8b:22:7a:46:70:9e:
f5:5c:32:5d:db:7e:d7:ec:ab:9f:2f:3a:46:f6:7d:58:f8:e2:
e8:22:d2:5c:22:5c:17:b3:57:23:d9:32:9e:be:cf:94:92:3a:
62:6e:89:05:25:c5:fc:80:2b:fb:fc:34:25:ef:35:b3:bb:37:
3e:6a:24:6a:56:bc:d8:60:a1:99:c3:c9:a9:d5:4d:27:22:cc:
9d:0b:27:17:2e:b0:1d:04:46:8d:a9:f0:61:4a:38:48:c1:f1:
58:3d:36:19:46:4a:95:82:23:32:f2:43:0d:7f:bd:ec:9b:5c:
e7:fa:c6:f8:77:22:50:4d:7e:73:56:9d:f1:50:82:79:6d:4b:
e4:ac:7c:d4:2e:6b:54:d9:65:ed:ec:9b:9e:54:62:3f:b9:e6:
b2:ef:5f:58:4e:6e:f0:a4:0f:f7:aa:d0:71:f3:5d:63:7e:36:
03:cd:64:9a:da:d0:92:5b:a5:14:8d:21:23:b4:59:6a:12:15:
da:7d:90:f6:a4:41:fd:6f:50:31:e3:88:2b:10:b1:38:4b:aa:
6f:22:f5:b8:ed:69:57:bf:d5:27:17:53:04:b3:26:c5:0e:22:
c6:8c:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:54 2025 by rpki-client