Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: u885ABR+xBkhdzgz+SFj/JudLYzXSDz+pIbBmvOZoj4=
Subject key identifier: 7A:96:59:EC:52:F7:05:75:66:55:12:E5:F9:13:6A:A6:29:49:31:C5
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 019897131E6300FED483081076935DB127BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0F02
Signing time: Mon 11 Aug 2025 03:01:09 +0000
Manifest this update: Mon 11 Aug 2025 03:01:09 +0000
Manifest next update: Tue 12 Aug 2025 03:01:09 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: UR2rOwBhIXIGFfqGiAiatCdYpHhHOHfyuimmSAQQr80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:1e:63:00:fe:d4:83:08:10:76:93:5d:b1:27:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Aug 11 03:01:09 2025 GMT
Not After : Aug 12 03:01:09 2025 GMT
Subject: CN=7a9659ec52f70575665512e5f9136aa6294931c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:4c:23:34:9c:40:d6:1a:4b:fa:24:3e:bc:
b7:99:b8:f3:56:b2:b5:6b:70:e4:a4:b4:51:b2:4a:
8b:af:47:aa:c2:9e:3a:0e:8a:35:41:e9:2b:8a:c0:
b1:73:b0:48:b7:eb:d1:7e:ea:05:94:6a:d4:ff:e7:
0c:15:cb:d0:0d:7b:c3:3e:7a:a1:7f:5f:f3:1d:c3:
0e:0f:94:26:88:a5:e6:45:9f:41:63:15:67:18:5f:
59:0e:c7:d7:34:52:ce:79:05:1f:1c:48:e0:d5:f8:
89:72:6e:e8:1e:07:9a:d8:b3:a5:60:c5:9b:5f:fb:
d3:c9:60:fc:16:85:3c:24:81:85:df:16:57:d5:03:
72:3d:0e:d3:44:dc:fd:ca:33:7e:bd:13:f9:a6:d6:
e1:0b:15:4d:bd:86:25:79:d8:ce:1d:9e:d7:91:b8:
76:94:6f:9c:ab:6c:ad:bf:b0:0e:b2:d3:bf:c6:24:
5c:2c:94:89:d4:39:d5:7d:66:41:4f:f7:80:17:ff:
06:0b:67:e2:68:79:45:e0:7e:c9:6e:c1:6e:f5:94:
a8:28:13:26:4c:a5:56:92:55:36:2d:bd:fc:0b:eb:
9f:51:32:1f:f7:a5:5e:da:e6:48:d8:5c:8b:47:da:
00:76:ed:a5:fd:d5:5d:43:55:dc:b3:af:24:8b:c7:
7d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:59:EC:52:F7:05:75:66:55:12:E5:F9:13:6A:A6:29:49:31:C5
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9e:3f:03:0b:37:ec:03:e4:ff:d8:6d:2f:65:58:da:1a:e0:
b3:a9:62:5b:14:55:d5:85:99:91:1e:b8:6a:88:5d:b7:4d:75:
3e:ab:fa:40:8e:f5:4a:71:df:df:c1:4f:87:04:6b:49:02:e6:
51:1a:71:6b:8a:5b:34:ed:fe:1c:21:e6:48:87:84:33:a9:59:
3c:a0:e0:ed:64:24:68:93:06:1a:bb:87:ab:71:1a:19:a8:eb:
ec:d4:9a:c7:d4:ec:d0:91:4f:64:20:87:db:98:bd:19:82:b3:
31:4f:01:97:43:c0:20:c5:ee:94:d4:fc:69:ee:21:db:c1:0f:
44:7f:ac:31:71:5e:20:49:be:01:1b:c6:92:24:ff:5e:fa:43:
47:a1:c6:33:85:2c:fd:d6:54:54:1e:be:88:78:6a:34:af:fb:
3c:6c:ea:1d:ce:52:d3:9a:da:4d:7d:99:d1:bb:9f:cf:33:4e:
77:7f:92:ad:35:f5:45:69:a1:06:be:83:8f:7e:5a:df:7f:a7:
54:82:e4:9b:ad:8c:e3:60:55:0e:79:88:12:70:ed:5a:3a:ad:
4e:73:52:92:2e:88:80:9d:3b:8c:84:ac:46:6e:76:de:d4:54:
32:d5:95:82:e4:8e:ce:ee:1e:bd:ed:7f:6e:43:89:5e:f4:c4:
f6:f1:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:01 2025 by rpki-client