Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: Mch8p7kPbJiFBGyGv3IhoZ24PYEf2B3KaFUQE1ej4x0=
Subject key identifier: BC:48:10:B8:0B:97:00:83:41:A1:4D:AB:D8:AD:03:EB:77:D4:58:2E
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 0197684E70018FF00AFE00A6A47351426E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 07DD
Signing time: Fri 13 Jun 2025 08:01:00 +0000
Manifest this update: Fri 13 Jun 2025 08:01:00 +0000
Manifest next update: Sat 14 Jun 2025 08:01:00 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: uzMVEC4GDyG8T0i99yW2F647rI2LN8keGR/xRfmH1ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:70:01:8f:f0:0a:fe:00:a6:a4:73:51:42:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Jun 13 08:01:00 2025 GMT
Not After : Jun 14 08:01:00 2025 GMT
Subject: CN=bc4810b80b97008341a14dabd8ad03eb77d4582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:11:76:79:6e:64:46:ad:4d:6c:ee:15:ae:
a0:d2:cf:bd:5e:94:15:ad:d3:01:d7:dd:03:9d:1e:
b3:fa:13:fc:09:fa:5c:43:bf:f1:f6:14:97:b1:9d:
59:6c:93:08:2c:3a:50:88:00:75:dd:2a:4d:a0:7c:
8a:a7:9d:c7:20:98:76:06:04:c6:6d:5a:d2:6f:3f:
15:c2:10:58:45:3e:98:31:03:40:c9:32:a9:fc:21:
a3:7a:90:7e:a0:53:1a:d8:ca:cd:43:42:7b:f4:0e:
fa:da:0a:84:6c:c2:60:a6:f2:fa:f4:fb:55:7d:4e:
db:94:05:ab:32:8a:7f:ac:a5:9c:6c:2a:da:78:85:
1c:63:b4:5d:b4:b4:9a:ce:c4:f8:f1:af:a9:6f:13:
7c:51:5f:99:17:2f:db:2f:ca:13:6b:43:bf:7b:bf:
40:17:04:12:00:84:73:04:5b:be:03:f2:ca:87:09:
3a:08:17:cc:ac:3c:9c:32:91:7a:5f:dc:24:c9:b1:
bc:03:a9:c0:d3:66:b5:7f:1b:2a:a3:11:42:f7:c6:
08:c5:e5:bb:b9:47:e2:a6:40:32:b1:d3:d4:85:db:
01:7d:44:88:18:e9:d3:00:85:63:36:e3:ae:be:49:
14:6f:95:2e:ba:a2:0b:6b:c5:77:e2:f6:b8:0e:07:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:10:B8:0B:97:00:83:41:A1:4D:AB:D8:AD:03:EB:77:D4:58:2E
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:b4:52:92:43:8f:82:5f:55:d7:6a:c1:33:41:20:30:3b:
aa:c3:a6:6d:4b:be:0c:8d:f3:dc:4a:ce:43:f0:57:ba:42:a7:
43:9d:ab:13:1c:d5:c6:74:a3:5c:b8:f2:56:87:23:36:35:2b:
79:9d:d5:88:f2:a6:7c:47:3b:cb:d0:50:f5:d1:2c:1e:2d:b5:
81:ae:6f:e2:43:83:16:e3:a7:d0:8f:9f:81:16:57:7d:8b:01:
04:68:d4:e3:60:68:a7:16:82:ed:7e:28:e0:81:40:25:ae:46:
29:5d:46:5b:e0:1d:d2:80:c1:3e:11:96:f4:da:fa:e8:1a:00:
11:0d:44:82:4b:67:5c:e2:97:39:7a:82:c4:db:25:c0:24:a2:
f9:17:fa:92:3a:40:70:fd:df:12:57:96:d2:6f:99:c4:55:8e:
37:22:8c:0b:76:76:6e:2b:7a:d2:9b:6a:d6:1e:83:ff:a9:2e:
98:fa:9f:de:6c:c2:36:f9:a3:1d:0c:f1:c8:1d:30:33:4c:4d:
2c:59:5d:9a:e1:78:02:f5:dc:e9:ae:18:9c:3d:cb:0d:cb:fe:
7c:7a:fd:03:b1:0a:28:99:14:5c:99:b1:7f:dd:e1:4e:65:c2:
e4:b3:33:af:21:4c:83:25:5f:70:9a:eb:b7:23:ef:b2:11:92:
14:38:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:41 2025 by rpki-client