Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: MGEYO7YcsZCF3q85MyJosBV7We6RSxU6RE792PKDjkc=
Subject key identifier: 3D:7E:A1:77:F2:2E:68:AE:15:A2:00:7F:6F:D7:D8:A3:11:0B:25:C0
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019879AF08EB3658CFF123C34F61F44A73C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 10:02:50 +0000
Manifest this update: Tue 05 Aug 2025 10:02:50 +0000
Manifest next update: Wed 06 Aug 2025 10:02:50 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: M3tOWx3IVe0a2iE1+EucM8GG3/CmY18b46gWTjOZgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:08:eb:36:58:cf:f1:23:c3:4f:61:f4:4a:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Aug 5 10:02:50 2025 GMT
Not After : Aug 6 10:02:50 2025 GMT
Subject: CN=3d7ea177f22e68ae15a2007f6fd7d8a3110b25c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:ad:fc:d7:9c:15:c7:e1:5b:61:2d:c2:bc:
3e:8e:f6:71:7b:f1:20:ae:e1:a9:69:8e:f8:81:9b:
33:9a:bb:bc:c9:75:19:a3:60:12:d0:67:71:cc:40:
d6:96:34:52:66:2e:38:b9:35:97:6c:c4:e5:8c:80:
18:23:ec:bc:54:e3:dd:d7:d1:aa:82:90:34:b8:47:
c7:1d:28:94:3c:26:87:7b:dd:02:6f:5a:ff:ef:e3:
3c:72:fb:f6:57:22:40:08:2c:8d:6e:27:d5:01:cf:
02:5c:5b:6b:8d:22:2e:9b:9b:be:4e:ad:cf:10:4a:
9d:70:6e:6c:f5:5b:31:65:9c:21:b4:24:00:c0:bb:
4b:f8:a3:90:af:b4:22:ef:81:05:cb:64:9e:60:53:
8a:40:42:6d:b0:df:07:9e:6b:64:6b:33:b2:8c:dc:
1f:3e:9d:d0:42:92:6c:f0:ea:c9:88:e8:93:07:73:
92:fb:70:64:0b:80:45:55:e5:ca:42:19:cb:3c:bb:
1f:41:61:a6:98:7e:8f:ec:8c:91:18:eb:35:b5:5c:
f7:9a:9a:a6:bd:dc:9b:11:8a:36:95:d0:21:4a:c8:
2d:bc:97:f2:1e:29:f2:bc:77:89:77:c5:d9:5b:06:
59:09:45:04:f2:cf:a9:ef:da:8e:d7:1b:80:71:0c:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7E:A1:77:F2:2E:68:AE:15:A2:00:7F:6F:D7:D8:A3:11:0B:25:C0
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ea:09:88:a5:b4:73:18:f7:b7:d7:32:91:47:86:e6:83:03:
a1:12:23:0e:34:f7:30:9a:85:66:a7:c2:34:9a:cf:49:40:3d:
c4:c0:15:11:7d:16:a7:cb:9c:52:82:53:22:64:9d:c8:7d:2d:
c7:d1:a3:cd:31:22:2d:a5:a8:f6:a7:d3:2c:0d:85:08:82:d1:
55:f8:59:a9:75:b7:a5:0d:f7:20:e1:3a:4a:e4:cf:41:39:01:
ef:fc:6d:e4:11:4b:cd:c0:f3:bb:87:b0:e4:1e:d6:26:93:27:
03:13:a2:07:fa:d6:f0:d4:c7:5f:ee:c2:e9:d8:8d:d5:2f:39:
2a:b5:ff:03:34:92:bf:ff:2c:d5:1f:e9:19:02:9d:05:6f:75:
d0:d8:ff:e3:8e:08:d1:97:23:e5:82:03:48:34:33:e0:92:72:
40:6a:8c:e5:f2:89:bc:20:e5:24:3d:40:9a:8f:12:7b:22:93:
cd:43:82:23:35:9f:b1:4d:39:e3:88:a6:c5:c2:12:4c:bd:b7:
8e:9b:7f:a8:3c:9f:f0:9b:6e:cb:b0:d4:5f:68:45:ad:1a:76:
64:82:b6:ff:ef:a2:06:3f:c1:12:52:23:a5:f1:2b:da:77:ff:
e6:73:bb:70:89:1f:55:36:03:60:f8:8c:df:36:d3:fa:9c:35:
32:ba:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:09 2025 by rpki-client