Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: ABvHykegnXQTwLU+Sfsa/tUkmzovNgw1odEo1RtNlS8=
Subject key identifier: 11:FC:14:B6:11:3E:E3:74:EF:6B:18:FC:87:2B:0F:18:C7:CA:C1:F6
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019773764206AC7CF39C2A58F501F352E4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0A14
Signing time: Sun 15 Jun 2025 12:00:19 +0000
Manifest this update: Sun 15 Jun 2025 12:00:19 +0000
Manifest next update: Mon 16 Jun 2025 12:00:19 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: XG8oJ0oH70yyX7KEcLGlcr49rjFV59jxwPHqGsofTo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:42:06:ac:7c:f3:9c:2a:58:f5:01:f3:52:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Jun 15 12:00:19 2025 GMT
Not After : Jun 16 12:00:19 2025 GMT
Subject: CN=11fc14b6113ee374ef6b18fc872b0f18c7cac1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:8d:57:83:8f:64:5f:ff:9d:ff:75:60:43:
93:99:78:83:a1:cf:bc:f1:20:cd:68:71:0b:3f:ff:
97:3f:40:a1:c0:b3:db:08:0f:5f:20:29:39:40:ae:
9a:1c:06:70:0c:ae:3f:cc:fc:5a:34:7e:eb:61:e4:
3f:c5:da:b4:ec:bf:b2:ba:3c:e3:b8:2a:1e:a1:1b:
d5:9b:ab:36:c6:d5:8d:be:7a:49:28:c7:13:4e:96:
d1:ec:5b:56:49:1e:6d:be:02:13:5b:40:f2:72:01:
d6:44:ae:6b:64:a3:37:97:a5:57:76:ff:be:64:cc:
c7:f7:83:6d:fb:5f:65:67:71:86:33:2e:50:ba:b6:
ca:b3:80:b1:21:7e:a9:d0:27:a7:27:03:83:fb:f9:
64:49:4c:06:33:c0:1e:23:e8:63:00:af:38:c5:4a:
a4:3a:02:c1:2d:84:55:bb:5a:d8:34:38:92:19:28:
a1:5f:b7:5e:dc:71:b9:68:f3:45:17:6e:cd:84:99:
64:4e:e1:8c:81:42:d1:fe:b1:3b:86:6a:9a:d6:b8:
a4:80:79:d2:9c:89:61:1c:f9:3b:f4:28:80:26:5e:
9f:87:6d:bf:ee:52:4c:3e:2d:fc:a9:d5:92:47:f0:
36:df:0e:fb:17:d2:c5:52:6c:2f:57:ee:f3:97:e8:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:14:B6:11:3E:E3:74:EF:6B:18:FC:87:2B:0F:18:C7:CA:C1:F6
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:79:43:5a:59:b6:8f:7a:f7:db:a8:76:e8:23:00:69:f6:
ea:f6:cf:29:3b:75:f0:21:2c:b5:f0:d8:5e:0e:d8:ea:c3:40:
8c:c2:e0:47:29:a6:ce:f0:27:a4:4e:98:b0:8f:24:de:ed:60:
2e:17:f9:4b:91:2a:75:99:a9:ea:e9:62:e6:80:67:4c:ae:30:
27:80:5c:b8:e3:75:0c:8d:84:d8:ad:7a:d6:8d:93:72:d7:b8:
81:9f:4c:0c:5b:7d:00:e9:f3:77:35:99:fc:f0:d0:77:4f:d9:
46:71:c7:a5:bc:6f:e6:8c:23:a3:3c:d0:4c:d3:37:c0:00:bd:
d1:ba:cc:20:e4:b0:5a:ba:13:81:f4:47:7f:e9:86:45:2e:e4:
6f:43:04:d8:9b:af:b1:95:f3:ff:0d:f3:1b:b1:a7:d7:8c:0c:
30:f7:79:f7:88:33:4b:d9:81:cc:6e:80:ba:93:fd:5e:4a:5b:
02:1c:c9:fb:d5:e0:ea:18:7e:68:5d:d8:b8:96:3a:4b:4c:03:
8d:33:25:a5:8e:bf:20:45:0b:04:d7:72:49:13:fa:5e:45:1b:
9e:ea:4d:2d:5f:2f:79:75:f8:a2:57:13:7f:bb:33:0c:0a:fa:
7b:07:86:cf:d9:96:6e:b6:28:73:56:84:de:36:b5:d9:71:f9:
d7:25:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:55:58 2025 by rpki-client