Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: hlfJz1FY3+4MigNe8J+S4SzL6XwMdrERi1zhHFMpxOk=
Subject key identifier: 7F:70:56:76:85:D4:CA:7E:4D:F1:F6:8A:8C:81:C5:A9:A0:19:1F:B3
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 01976F2C3BFE60E1947F25B7AA1BF2974A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:00:59 +0000
Manifest this update: Sat 14 Jun 2025 16:00:59 +0000
Manifest next update: Sun 15 Jun 2025 16:00:59 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: Fmm1ADbSVmYmNZn111BWNMjR+fXwXiO5mmbCMyzPOdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:3b:fe:60:e1:94:7f:25:b7:aa:1b:f2:97:4a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Jun 14 16:00:59 2025 GMT
Not After : Jun 15 16:00:59 2025 GMT
Subject: CN=7f70567685d4ca7e4df1f68a8c81c5a9a0191fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:36:c8:3f:11:3f:66:65:c0:af:05:f8:ee:
f7:13:66:ff:94:d1:43:f9:11:78:12:86:5f:f6:4c:
9d:56:d6:00:a9:85:cd:58:4b:8e:10:62:48:67:01:
ff:8f:c3:ca:02:5b:6c:67:8d:5c:19:ff:7b:89:7b:
03:c1:ac:dc:8a:c9:64:7f:25:f7:73:b7:61:d7:ef:
76:3b:63:79:ca:4c:0f:55:6b:0e:a6:31:cc:59:ad:
12:92:b6:3b:9f:89:77:19:43:af:ee:7a:6e:3c:84:
e5:b0:4a:d3:c5:44:5e:5d:e6:13:85:90:7e:c6:7f:
5a:c2:d2:33:a9:85:25:15:43:7d:4d:83:60:cb:43:
3e:30:59:ce:c2:5d:66:d4:92:53:48:cd:ec:c7:94:
af:e6:d1:9b:58:10:cf:15:5c:6a:ff:2b:c8:ca:ec:
e0:a9:02:9a:fe:d2:ed:7c:24:5e:c1:40:c9:4a:f4:
bb:3a:5e:31:7f:f8:75:e1:a8:24:88:dd:64:18:02:
06:30:3e:f1:78:42:03:65:ce:d6:f3:a1:33:0a:46:
6a:3c:37:d6:2d:a1:ca:5a:dd:cf:b5:cc:16:a3:e0:
e0:26:5b:ef:ee:43:05:c7:71:b8:3b:59:b0:12:80:
bb:32:f4:95:5c:55:f2:94:17:05:ae:13:4b:19:7b:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:56:76:85:D4:CA:7E:4D:F1:F6:8A:8C:81:C5:A9:A0:19:1F:B3
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:80:fa:e7:2a:9c:db:99:81:32:7d:48:b3:8e:5b:9a:dd:
70:4c:ba:24:fa:84:40:86:a4:36:31:cc:ce:29:f4:d6:06:cf:
89:3d:5c:57:75:22:57:2b:0c:45:69:bf:ce:ed:7f:1c:f1:5c:
1e:7f:09:0a:ee:f5:31:cc:61:56:b0:44:56:fb:aa:9a:41:fd:
52:49:2e:0f:93:25:f8:21:e1:cf:04:81:38:9b:d9:28:64:85:
ac:04:75:be:37:d9:02:15:cd:9b:ec:63:c5:71:4d:0f:17:1b:
d1:46:65:40:16:f6:65:16:2b:b7:04:03:05:60:97:0f:4d:98:
2f:e7:1e:02:60:f6:e8:5e:89:a0:31:9f:10:c3:87:df:6c:13:
65:d7:0d:f6:e9:85:c6:f5:aa:33:ae:7e:37:20:54:07:53:22:
bf:20:d1:64:23:90:ab:2e:02:da:d1:27:1a:ba:20:3d:89:cf:
ae:52:2e:13:95:6f:33:b2:d5:77:ff:02:b8:21:9d:52:c0:e7:
f6:1f:40:c5:60:9a:88:2a:d9:a9:c5:d6:87:8e:8c:25:38:33:
79:6b:bc:30:9a:3f:1f:70:70:c4:1f:db:73:f6:31:63:88:31:
9b:e5:b5:33:b6:b3:3b:4b:6f:2e:2d:3f:ee:c9:7c:2e:79:b5:
1a:6b:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:28 2025 by rpki-client