Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: GWbUT3XBqu810u+gpXtJ1mbJW4diDRP31/8eD5Dzc3s=
Subject key identifier: 81:CF:CE:BA:81:D7:8F:C5:9D:A4:03:AB:66:03:C0:D8:D4:0F:FB:7F
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 01976D3E87EDB300E33EAE4C6E4D73B8F175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 014A
Signing time: Sat 14 Jun 2025 07:01:43 +0000
Manifest this update: Sat 14 Jun 2025 07:01:43 +0000
Manifest next update: Sun 15 Jun 2025 07:01:43 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: EP2D09eCXEmMbJuSBDg6yCnaTK5fjbsgY0Pe6IR9zpM=)
2: QSjkZq8_AJ0B8g7dlzd0nA4JsWQ.roa (hash: YMcvfk9S0D5BI+lBDXlsaUm2v/yIEV2HtkKOAQ1Y0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:87:ed:b3:00:e3:3e:ae:4c:6e:4d:73:b8:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Jun 14 07:01:43 2025 GMT
Not After : Jun 15 07:01:43 2025 GMT
Subject: CN=81cfceba81d78fc59da403ab6603c0d8d40ffb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:8f:8e:bd:3f:76:6c:62:f5:72:1d:07:9c:
06:78:43:20:79:ad:17:ba:5a:cc:71:2b:9d:04:57:
93:5a:ee:be:09:38:b1:47:dd:8f:bd:61:79:2c:eb:
df:3b:3e:d8:eb:04:ae:cf:26:c5:5f:29:cc:8a:dc:
2f:ac:f2:41:28:db:03:50:fd:fb:31:5d:2a:d0:32:
8a:24:a3:c4:a7:44:af:d6:28:4f:f5:49:8a:62:ff:
91:91:0b:1f:61:78:23:53:42:d4:59:46:28:41:65:
10:73:d8:e0:24:81:03:9c:3d:4c:65:b8:9a:eb:c4:
82:bf:c6:5c:f2:82:ed:df:2e:d6:54:6f:87:26:94:
e4:ca:95:54:0d:02:1d:42:91:11:bf:9d:ae:73:cb:
77:8a:a0:97:58:18:3e:b6:d0:91:e9:a0:0f:da:70:
56:09:d1:1c:80:dc:6e:57:f0:78:cd:0f:6c:97:2d:
0f:95:db:ad:25:34:39:72:47:d8:86:cb:5b:f5:56:
de:a1:9b:8f:55:c0:d9:f9:6e:7b:47:fc:c0:15:97:
b3:58:5f:32:57:b6:29:63:a1:fe:3b:b7:bd:11:27:
ac:39:f7:df:aa:32:7e:ab:24:57:b2:31:55:74:03:
17:07:14:59:ba:c9:6f:62:0e:eb:64:cb:a1:8d:c8:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:CE:BA:81:D7:8F:C5:9D:A4:03:AB:66:03:C0:D8:D4:0F:FB:7F
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8d:50:19:36:3e:5d:28:e3:f8:cd:3d:0e:1f:60:a9:21:03:
95:62:ba:bf:15:6a:c1:cd:e9:73:06:a1:0d:a7:d3:6d:f8:95:
6a:b4:8b:45:2a:89:b2:0b:31:64:ac:1a:de:9e:fc:ee:dd:38:
7f:e6:f2:a4:bb:20:be:c6:e6:b0:30:57:12:5e:6e:0f:3c:a9:
30:09:46:f5:53:cd:4e:6c:46:4d:7c:bc:8b:3e:36:a1:e2:75:
8b:85:e9:a8:81:a5:b3:dd:cb:49:fe:9e:7a:4a:b9:c2:c7:02:
70:a2:ce:05:78:1c:34:0e:df:7b:5b:c1:81:db:fa:79:af:fb:
8f:4f:4f:45:fd:41:44:18:70:58:1d:46:97:26:ce:73:b3:dd:
2d:a9:63:25:79:8c:10:10:23:3a:ac:da:ad:01:6d:5c:65:77:
f7:8d:07:8f:50:22:0a:ec:e6:2f:69:ce:86:41:8e:86:62:c2:
9b:0c:53:36:e1:d0:12:30:11:c4:f1:a8:2e:95:b0:f4:bf:ac:
c1:65:65:9f:73:7a:d6:59:4c:4f:c0:02:ff:c8:03:20:3e:8a:
3e:0b:f3:10:9c:11:6e:e4:47:6a:9e:2c:57:d4:4b:6e:ed:c9:
25:c1:50:19:ac:7e:66:b5:9c:dc:86:ae:e3:de:5e:0a:e9:9f:
0e:ce:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:12 2025 by rpki-client