Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: AqGnp+8TwPqSCCpxexr2k3Qhjd+n3/5Iwe1gs8AK/9Y=
Subject key identifier: 7D:16:CA:1F:74:6A:21:3D:1F:B4:8E:EA:95:9B:4D:42:74:69:4D:41
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 01978E7FCA75ABF05E348B55B799E8E7203B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0C81
Signing time: Fri 20 Jun 2025 18:00:28 +0000
Manifest this update: Fri 20 Jun 2025 18:00:28 +0000
Manifest next update: Sat 21 Jun 2025 18:00:28 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: FyFcamuhklr0RZF+L2LwfHfL2n3nA0KfancG4IVQMCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:7f:ca:75:ab:f0:5e:34:8b:55:b7:99:e8:e7:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jun 20 18:00:28 2025 GMT
Not After : Jun 21 18:00:28 2025 GMT
Subject: CN=7d16ca1f746a213d1fb48eea959b4d4274694d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:0e:8f:73:62:a0:ab:e3:6e:35:10:6e:e4:
8a:73:ab:a9:90:af:5c:2d:33:30:af:2b:89:b4:29:
1c:5e:ce:31:c8:66:ca:51:9a:62:9a:f9:a4:59:63:
54:6d:50:10:48:d2:9b:1c:e5:85:8e:b6:62:0c:92:
b1:24:d6:b5:04:7a:c9:45:66:12:27:96:dc:d8:eb:
9d:54:df:ab:c9:31:52:57:39:d6:c4:5b:2e:73:ea:
57:f3:fa:19:65:c8:0d:5f:aa:7c:1b:5d:70:43:cd:
e4:83:34:bd:a0:65:a6:c8:f4:57:99:cc:2c:07:eb:
ec:bf:bf:bb:c0:4c:dc:de:7b:9d:85:92:21:ac:a8:
c3:44:d7:bc:2a:e6:74:7d:1f:45:8b:48:35:a9:22:
63:6d:4e:ee:96:3d:8d:f2:84:23:3d:18:10:4c:54:
4a:2a:55:20:74:44:cf:17:25:dc:27:24:f7:92:0c:
05:e2:37:23:54:e5:44:03:7c:27:78:db:15:c4:a6:
1d:c0:5c:eb:c3:58:6c:fb:e9:f3:74:50:77:d3:5a:
6c:ff:74:98:d3:36:ea:00:ce:5e:9b:45:03:8f:c4:
85:35:dc:1b:6f:b9:98:40:1b:8f:4c:c7:73:ea:22:
dd:4d:16:22:8e:ff:11:d2:95:d6:7a:17:77:7d:9a:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:CA:1F:74:6A:21:3D:1F:B4:8E:EA:95:9B:4D:42:74:69:4D:41
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:86:a2:40:30:75:27:e3:b3:91:21:c7:bd:1e:28:b8:08:db:
b4:48:24:23:ae:da:f2:e9:08:36:b8:e7:6c:7a:61:09:c5:fb:
69:e9:26:b4:08:3b:57:74:15:44:20:54:5d:82:26:2b:55:19:
2b:60:b7:d5:f6:d3:06:f0:61:67:7c:74:d4:4b:2f:cc:07:1b:
77:08:75:e2:08:0b:1f:41:47:6e:34:7c:8f:ab:31:ba:dc:79:
c1:8b:8f:dd:55:6c:8f:48:73:c7:5e:91:a6:c6:c5:0e:2e:a4:
37:86:99:8d:86:ee:ae:b4:34:d0:92:e9:cb:d4:23:7d:83:a4:
f0:c3:3b:31:c1:7b:c7:19:6d:30:60:7b:07:02:80:93:46:f9:
96:d7:d8:c9:c0:b4:5d:75:10:4a:f0:9f:99:c3:94:27:42:5f:
a1:14:00:0c:39:06:3a:8d:98:70:79:03:08:5a:99:9b:cf:3c:
89:d2:60:c8:05:4b:61:07:1b:77:13:bb:a8:6a:24:cc:e3:4a:
a3:fb:b5:79:bc:a3:d3:f1:0d:6a:8d:ba:ec:fa:c1:86:ab:65:
69:09:90:78:89:44:62:49:4a:ff:95:9c:6e:28:ba:27:54:f9:
97:24:88:6e:a4:53:0f:86:b5:b6:52:f0:ce:96:8d:57:82:db:
92:d1:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:49:55 2025 by rpki-client