
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
File: e6g1J3sxmmnH9usa1IsJ1mMv090.mft (raw, json)
Hash identifier: BsgJ8iTu7UGO7ZVrffeWHWnTg6KJRt91P4jI7RdYAcI=
Subject key identifier: AC:D2:73:82:17:0A:CA:37:59:EE:9D:FB:0C:D2:23:F2:33:62:D2:76
Authority key identifier: 7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
Certificate issuer: /CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
Certificate serial: 019896A5AB1CFEE9419F1E7941A5A23FDAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
Manifest number: 04DA
Signing time: Mon 11 Aug 2025 01:01:36 +0000
Manifest this update: Mon 11 Aug 2025 01:01:36 +0000
Manifest next update: Tue 12 Aug 2025 01:01:36 +0000
Files and hashes: 1: e6g1J3sxmmnH9usa1IsJ1mMv090.crl (hash: GMdzArp20xb5xuFKQ8dKdh1WeSymLORDvVil0VuNd4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:ab:1c:fe:e9:41:9f:1e:79:41:a5:a2:3f:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba835277b319a69c7f6eb1ad48b09d6632fd3dd
Validity
Not Before: Aug 11 01:01:36 2025 GMT
Not After : Aug 12 01:01:36 2025 GMT
Subject: CN=acd27382170aca3759ee9dfb0cd223f23362d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:82:16:ab:5f:90:6a:ed:7a:86:1c:fe:d1:
6d:01:0c:37:38:66:56:23:bd:63:96:7f:41:1c:88:
f8:ad:4c:5c:92:c1:b8:b2:57:bc:e6:4b:30:11:64:
0e:c8:95:73:31:16:fe:cb:11:52:c9:2c:e5:76:08:
21:af:da:1b:af:98:44:f6:6f:57:13:06:55:87:3c:
e0:8a:45:fd:77:f0:03:66:ce:9f:7b:4c:d0:ac:ca:
bf:42:5e:c2:d2:e9:eb:72:67:bc:1c:73:80:cd:32:
87:f3:b1:1b:67:89:62:3b:c3:a1:83:09:61:06:45:
a8:e6:1c:9b:9b:1e:41:3e:45:92:34:be:5e:c7:7b:
fb:e3:8f:b6:86:7f:55:0e:df:67:5f:47:50:5b:be:
5b:b3:55:90:bd:4d:7c:29:66:4c:a0:64:f7:8c:93:
0b:e8:36:7c:18:a5:14:99:57:08:2a:75:6c:b7:eb:
62:61:50:19:19:83:a5:00:5c:d2:6c:9d:fa:76:e0:
73:e1:6b:e9:5c:31:04:26:72:2c:b6:e9:b0:f2:02:
ea:8d:f2:df:2d:d6:9c:6f:f4:1b:d7:0e:9d:e3:89:
79:cb:73:fa:3d:fc:43:24:3e:73:c7:d8:a6:55:88:
e5:a2:c7:00:b6:49:ef:ab:8c:41:e1:e9:b4:6b:5c:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:73:82:17:0A:CA:37:59:EE:9D:FB:0C:D2:23:F2:33:62:D2:76
X509v3 Authority Key Identifier:
keyid:7B:A8:35:27:7B:31:9A:69:C7:F6:EB:1A:D4:8B:09:D6:63:2F:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6g1J3sxmmnH9usa1IsJ1mMv090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2beab8-e297-4e63-bfbb-64a3d071555a/1/e6g1J3sxmmnH9usa1IsJ1mMv090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:21:29:56:25:af:00:b8:2c:bb:ce:6c:c1:71:73:7e:7c:
ef:3b:4d:de:22:58:e7:65:b5:25:ed:20:0d:8b:8b:ff:72:33:
42:58:89:25:59:28:15:12:8b:7e:ec:6c:00:49:7a:1e:37:70:
de:da:d3:1b:f8:64:05:bb:b7:f5:e0:32:0c:d6:bb:58:59:95:
ea:ea:78:50:b1:41:b6:f6:3c:fd:b8:5c:c2:e2:a2:ac:69:1f:
41:40:32:2a:21:aa:9d:e8:78:11:c9:56:5c:a6:1d:4e:cc:64:
33:bd:48:03:1b:86:32:e5:e1:28:69:69:2e:46:37:de:a3:db:
2b:53:57:4b:fb:ef:60:ca:87:d5:9b:59:ab:fa:2b:2b:9b:6d:
5e:61:ea:4c:c4:78:99:5d:0b:49:72:dc:49:d4:9e:e2:49:88:
d6:d8:d4:2d:e4:aa:fe:40:62:2d:51:3e:4b:99:6c:b7:e5:d2:
59:bc:1a:34:62:4b:e7:68:d5:6b:e9:54:0f:81:d9:7d:03:e1:
2d:16:94:22:74:01:8b:d7:24:f4:e6:4b:0c:ff:f1:41:0b:50:
01:ed:44:00:8f:ec:4b:ca:64:30:bf:27:f2:29:de:a1:ba:c1:
20:26:ef:1b:e2:b9:0e:c7:e8:d8:9e:fd:a6:c0:74:19:3e:70:
c0:b4:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:15 2025 by rpki-client