Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: VounxFOll65ZhSppGQPR0q7KUvjPkAGegJ3/eDBDW+E=
Subject key identifier: D4:7E:B1:B6:39:FB:54:2D:F6:45:C4:09:EA:EC:30:77:A6:4B:6C:C6
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019769CF218623E0BC5A11B6E68B5EAB438F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 0FAA
Signing time: Fri 13 Jun 2025 15:01:11 +0000
Manifest this update: Fri 13 Jun 2025 15:01:11 +0000
Manifest next update: Sat 14 Jun 2025 15:01:11 +0000
Files and hashes: 1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: mObV97pgfkUO2f8anV2LuyeiC+0E0KmMYx4mS7ZcrFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:21:86:23:e0:bc:5a:11:b6:e6:8b:5e:ab:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Jun 13 15:01:11 2025 GMT
Not After : Jun 14 15:01:11 2025 GMT
Subject: CN=d47eb1b639fb542df645c409eaec3077a64b6cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:3f:1e:d0:36:06:93:51:fd:6a:36:23:cc:
c9:2e:e8:5f:a7:d7:55:fb:52:03:65:b0:11:76:c2:
7c:52:ea:ce:57:e2:ee:33:16:62:94:a3:24:9d:04:
1a:00:a9:09:ed:12:29:a3:24:f5:43:58:9b:10:18:
f3:e2:64:18:00:da:98:6f:39:78:e4:3f:7e:fc:b4:
93:c6:cf:8d:dc:dd:b9:8b:a6:c6:25:ec:63:e2:0a:
da:f2:44:7a:65:2a:0b:8d:f9:97:30:00:fe:41:35:
b2:b3:8c:aa:67:c1:17:1d:31:9d:15:5b:f5:77:eb:
d7:7a:34:70:a9:86:b3:5c:ca:33:5e:83:a2:59:72:
8d:25:98:b8:b9:4c:b4:f4:d4:53:51:57:36:88:2c:
52:7f:6f:4c:99:a4:5a:6f:e1:52:4d:67:63:2f:15:
1e:22:f0:50:37:46:54:ac:70:55:c6:54:f0:2b:9a:
27:97:7e:69:ed:60:c4:52:b7:02:1f:98:8f:31:60:
cb:e4:66:db:06:9d:2b:9c:67:b4:e6:ec:a5:e1:42:
88:57:0f:4d:ae:8b:00:ff:5b:d0:46:81:7d:17:d8:
0e:a1:e0:e6:e5:cf:a4:0f:74:a0:1d:63:64:6e:92:
48:8e:c6:9c:87:de:e6:7a:46:3f:c2:82:16:85:15:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:B1:B6:39:FB:54:2D:F6:45:C4:09:EA:EC:30:77:A6:4B:6C:C6
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:d6:0d:e9:dc:61:0f:3e:7f:06:7f:42:76:99:1b:65:44:
05:8d:cf:f9:ba:ec:36:8f:8a:d7:6b:cc:02:04:cd:ff:44:cb:
60:94:cb:08:ab:24:69:03:71:12:a4:b0:27:dc:b0:59:87:11:
8a:2e:f7:df:00:e6:a9:16:27:4f:27:2f:0b:35:e8:0f:23:4f:
d6:18:a5:3d:12:68:fc:ec:ee:b8:45:6c:16:d3:4c:ac:27:b9:
82:3e:87:f1:f9:9c:b0:5b:6c:78:ab:e5:0b:cc:b7:b1:65:a0:
c3:90:00:05:96:eb:a2:af:ec:92:68:ad:bf:f2:4b:2a:6d:ae:
98:36:c3:49:de:2c:12:d9:b2:e3:20:17:3e:e9:7c:05:5a:5f:
25:74:93:19:2f:99:1a:78:dd:6d:92:8b:75:e0:b5:62:c4:15:
6a:10:72:e1:d5:f3:b1:dd:dc:53:58:fa:d6:ee:be:17:f9:c3:
30:85:42:4d:94:0a:af:02:31:22:de:e4:c1:b2:21:9c:33:6b:
4f:2c:b9:03:df:bc:3b:f4:6b:6f:45:9d:95:5f:a6:1d:9c:19:
ef:29:df:4e:64:d2:49:ae:19:12:e0:a8:16:d3:68:51:35:60:
be:71:9c:84:7d:31:5a:f6:c8:03:c1:82:31:eb:18:ad:29:26:
48:ec:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:23 2025 by rpki-client