Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: Fphl+c1iJxbnu1pxibqmn+2hBGTY3IxqAjgwaNr05uk=
Subject key identifier: F1:16:CB:FE:93:BB:9E:77:A8:6E:27:48:E1:A9:A1:08:68:66:6B:AE
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 019873E1F68DA91E37C62A815B600CD758C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0CE7
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: +pDZ6KsYoQQtBgRd4dhUeRD6rjnNV0HCnDyUKm7KRL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f6:8d:a9:1e:37:c6:2a:81:5b:60:0c:d7:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=f116cbfe93bb9e77a86e2748e1a9a10868666bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:94:23:01:07:b4:73:09:61:68:1a:07:56:
84:9e:1c:11:c8:08:b6:ef:1b:5f:7a:e9:02:0f:e9:
3f:52:41:c5:67:92:b4:fe:d2:95:d5:db:23:00:4d:
ef:8c:f0:c7:df:d9:82:77:59:06:8f:de:39:c8:13:
e1:d8:4c:8e:08:91:84:aa:3d:ba:1a:b9:5d:93:c2:
e6:75:9b:24:7a:5c:05:75:8c:91:9c:7b:eb:80:44:
95:98:6d:07:7e:66:34:76:f8:ce:ad:2f:d5:89:a4:
be:dc:72:9f:57:fa:5e:08:6d:3e:52:63:dc:6a:30:
50:ad:ef:15:6b:ec:4a:5e:98:59:6f:2b:0f:42:89:
d5:17:99:56:6a:ad:23:b7:9b:95:04:cb:21:df:fc:
78:15:17:55:29:e7:68:eb:f7:25:00:f3:80:46:d1:
e6:a8:99:1e:91:fc:ae:3d:92:75:00:37:04:16:c9:
c2:8f:b0:66:fb:46:09:45:da:28:f6:54:1d:ad:53:
a6:81:7e:a3:e3:8b:95:e9:37:6c:33:56:41:9e:f9:
58:e0:be:1f:f9:f4:22:f5:1e:bc:23:e3:bb:05:a8:
03:fd:85:b2:c1:5b:94:93:21:51:84:0a:5f:b4:cf:
55:cd:70:c9:9a:64:6a:11:9b:eb:ad:20:ba:29:40:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:CB:FE:93:BB:9E:77:A8:6E:27:48:E1:A9:A1:08:68:66:6B:AE
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:95:68:9f:5b:c5:49:db:60:c0:0e:40:c3:0f:53:02:3d:
7d:a7:ec:30:2f:36:e7:98:6e:57:8c:4e:76:93:79:b9:7f:09:
da:41:5d:90:16:1a:f5:24:57:21:ff:11:18:23:2c:91:c7:54:
8d:b6:54:7a:04:a8:3b:af:ea:77:a1:00:b0:6f:d6:b3:c0:f2:
7b:b6:64:9e:f9:7a:ae:0a:99:f5:ac:44:26:c0:4d:ca:9a:c5:
ce:53:0a:63:ce:59:82:a3:9a:47:49:34:d3:84:4f:c9:a1:d0:
42:b7:04:cf:d9:bd:63:af:47:34:c5:d5:eb:b9:dd:5e:06:e2:
f4:06:e6:49:9b:c5:ad:64:6a:9d:b0:02:a1:20:b2:88:fa:9a:
9b:05:02:f7:d1:70:96:9a:68:08:d4:0d:20:a8:4e:cf:11:71:
3b:97:79:c6:24:b3:fb:b4:de:c7:29:cb:90:65:17:4c:7a:bf:
49:b2:e1:e0:06:fc:b1:d6:5f:4d:5a:19:67:f3:c6:ab:d8:03:
de:d6:c8:f8:3c:1d:61:f2:03:09:89:8a:96:24:b2:8a:17:76:
1d:d9:07:ed:6d:2e:73:0b:08:0e:91:f4:45:33:7f:6b:12:3f:
19:7e:b9:9c:6f:06:59:bb:46:81:24:b8:5e:2d:d0:5a:2b:b4:
b9:0f:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:32 2025 by rpki-client