Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier: sJMXF6JhtNH/SdkYy1ut6RSFKVuuUZInwqqhICcF+aI=
Subject key identifier: 33:47:29:5A:2C:40:39:AC:D4:96:DF:C5:89:17:91:14:D8:41:06:6D
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer: /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial: 019894B803C1CAD81A28CCEAA56AB9CCF731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 16:02:24 +0000
Manifest this update: Sun 10 Aug 2025 16:02:24 +0000
Manifest next update: Mon 11 Aug 2025 16:02:24 +0000
Files and hashes: 1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: VGy3rFBbihfHgnb8d9WGL5nI0/lecUSeMuwjrjQvSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:03:c1:ca:d8:1a:28:cc:ea:a5:6a:b9:cc:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Validity
Not Before: Aug 10 16:02:24 2025 GMT
Not After : Aug 11 16:02:24 2025 GMT
Subject: CN=3347295a2c4039acd496dfc589179114d841066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:d5:cf:70:90:3d:99:21:70:72:14:29:0b:
17:82:6e:ea:27:cc:a3:f0:7b:05:db:89:f2:62:7e:
e2:e3:26:15:9c:54:76:d0:a2:32:73:ba:45:21:87:
e2:0a:79:18:8f:57:87:b0:7c:c0:4f:76:6b:f0:a5:
8c:9e:39:f0:3a:78:04:42:bd:f3:96:e2:d6:96:9e:
26:13:2b:ea:2b:52:86:e4:90:6c:2d:a9:ec:32:68:
aa:34:1d:e8:9f:ac:5a:28:b8:8e:eb:0a:5d:3e:64:
53:02:51:7e:80:e0:ea:0a:63:54:62:b7:ff:98:b6:
a5:e1:bb:0e:8c:f4:5c:42:95:55:15:fd:c0:52:5a:
8b:70:82:fd:c7:a8:e4:d7:87:91:0e:dd:ac:26:99:
c4:76:1d:71:c2:a6:93:e7:cc:1e:2c:7c:33:69:9d:
37:13:8e:b9:66:76:58:40:6e:8b:44:96:79:ef:97:
0e:21:c4:50:5b:b4:a6:eb:06:f8:31:33:7b:8b:a2:
71:fe:da:33:65:88:7a:57:c4:ac:92:23:84:b3:cf:
ab:c0:c5:4d:e5:bd:a2:ef:59:57:02:45:4a:ed:05:
bd:2f:f2:71:97:4e:ac:4a:53:e1:15:2c:14:f2:88:
09:e1:6d:15:d9:38:23:30:70:9f:8b:1e:68:01:79:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:29:5A:2C:40:39:AC:D4:96:DF:C5:89:17:91:14:D8:41:06:6D
X509v3 Authority Key Identifier:
keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:c4:dd:fc:cd:a5:d3:b5:76:9f:3d:cc:f6:27:b2:09:da:
2f:d9:80:cb:87:fc:03:86:36:72:2e:cb:2d:66:7e:af:86:2d:
f3:d9:85:2b:79:76:3d:30:1f:1d:c5:0d:26:f1:cc:a0:89:c5:
80:4f:a3:14:d5:5b:63:a1:b1:08:b9:53:fc:38:13:d6:1f:e1:
34:2f:74:2a:8a:99:6e:0e:ec:c1:5c:9e:a5:ef:ee:8d:0c:fc:
80:33:65:e5:44:d3:87:d2:61:78:c4:71:bd:dd:70:ec:2d:71:
12:8c:99:ba:13:69:31:5f:48:42:1d:0a:e9:1a:4a:b5:14:d6:
3c:9f:13:00:62:bc:8e:f3:c6:9b:7f:97:4c:45:ef:86:2b:31:
62:08:9c:be:3d:8d:24:8a:d8:1a:8f:71:fe:f1:29:c9:66:3c:
ac:7b:40:6d:e7:55:01:96:7a:3f:55:a8:20:90:0c:e5:b4:a6:
e9:70:17:ef:bd:fa:4f:80:3a:c1:03:c7:15:33:91:35:ef:77:
ce:13:dc:47:f9:83:9c:e5:98:09:40:9f:af:68:6c:2b:ee:a2:
34:2e:29:c6:e9:f0:33:92:04:b3:0d:85:11:dc:22:f3:97:4f:
91:ad:79:86:f5:01:4f:a9:08:6c:c2:41:96:a1:94:ee:33:e9:
d3:99:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:09 2025 by rpki-client