Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: xEk8mR1Hhkd3xiOi2IACeZzeI8KdV8h8Xwp4U7tOskQ=
Subject key identifier: 7B:72:F3:76:E6:72:39:EF:6F:11:C8:B2:82:56:AA:EC:B1:1A:41:C8
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 01976FD1206DDCEDA94791B9E2F86CBB0ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 085C
Signing time: Sat 14 Jun 2025 19:01:05 +0000
Manifest this update: Sat 14 Jun 2025 19:01:05 +0000
Manifest next update: Sun 15 Jun 2025 19:01:05 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: 964UWDgKqauSLcrXM5JfRcQNuVpxh47BcZl6dMye0nA=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:20:6d:dc:ed:a9:47:91:b9:e2:f8:6c:bb:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Jun 14 19:01:05 2025 GMT
Not After : Jun 15 19:01:05 2025 GMT
Subject: CN=7b72f376e67239ef6f11c8b28256aaecb11a41c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:03:4c:29:42:7f:24:c1:0e:8f:ab:fb:58:
c9:4b:9a:f0:33:a9:da:6e:d0:7c:fd:56:9e:55:a0:
2f:03:b3:e2:6d:25:14:a4:be:33:8a:38:de:8e:83:
e9:74:90:4c:69:28:2b:33:49:da:dd:6c:08:8d:d0:
ab:19:b4:4c:a0:19:b5:c5:e6:b4:14:d4:96:59:01:
a6:01:e0:fd:25:fd:c4:af:ef:8c:a9:23:ae:fc:24:
20:e4:4b:64:a0:31:a5:62:6b:ca:c4:5a:93:7c:1d:
1c:45:f0:c6:5d:31:5e:a9:6f:88:6f:09:65:86:10:
57:38:f5:5f:d7:24:16:57:ce:13:5d:66:c7:37:7d:
c7:20:74:fc:af:84:63:63:6c:73:4a:7c:02:36:d0:
bb:33:11:9c:eb:05:3f:0d:3f:2f:76:c6:47:36:81:
22:a9:87:65:38:88:5a:8f:f7:8b:c0:51:25:b3:1c:
5f:c6:f9:5a:60:37:7e:bf:40:45:e6:a6:c3:a2:38:
bc:ce:17:62:96:e1:22:85:16:e3:22:a5:50:8f:32:
27:7a:82:39:77:a5:ff:ac:be:a7:0a:68:b5:d6:74:
3c:a6:82:90:46:73:ea:98:4d:02:ea:d9:f4:4d:df:
fd:05:39:08:a0:62:5e:4c:e3:4f:88:ab:96:f9:e0:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:F3:76:E6:72:39:EF:6F:11:C8:B2:82:56:AA:EC:B1:1A:41:C8
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:71:2a:2b:2d:67:e6:c2:e1:89:cc:34:d9:60:14:7e:e4:86:
43:98:6b:99:7e:fe:38:73:e4:7b:c1:cf:2f:e9:82:50:18:aa:
2f:b3:78:e8:59:02:69:80:10:dd:45:60:6e:60:16:5f:27:89:
fb:da:fe:d4:2a:9f:82:63:46:0e:ef:79:76:50:40:d5:06:0f:
7c:12:5b:89:e1:f7:4d:11:11:19:78:55:e8:bc:bb:58:16:f9:
3a:a7:8c:4e:4e:0d:66:7f:4f:52:a9:ab:b4:c6:f3:23:77:bb:
2c:8f:c9:41:50:5a:26:ac:15:49:dd:cb:a5:f8:a6:07:9a:f3:
50:be:7b:03:2f:7f:3a:f3:90:b5:52:10:a5:70:15:d0:c3:1a:
3c:06:5e:c4:57:e4:b3:b3:d3:93:71:ba:ae:d4:46:c6:bf:ef:
1b:d9:c2:25:34:af:55:17:1b:84:a7:4d:01:5a:c3:ee:c9:93:
90:6e:98:9e:eb:9e:d6:3d:d7:21:1a:02:b7:fc:c2:51:46:ca:
ae:25:98:3c:ba:0d:60:90:8f:77:71:7c:3f:26:7b:58:70:ce:
fa:42:24:5d:95:04:bb:a1:da:3a:e8:86:b1:36:6c:3a:1b:03:
1b:7c:23:e8:35:dd:96:c2:96:6c:17:d6:90:f6:34:87:2e:ad:
67:96:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:25:48 2025 by rpki-client