Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: QQLlPT+9sGm3Rxbi6FPyJ96lKeBUI1r1neiD4NfI1NU=
Subject key identifier: AA:17:12:DF:66:8C:11:21:F4:80:6C:B9:73:88:07:AE:67:5A:4C:AB
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 01988B0E9F6BE8DD93B48137EAC4FAB81362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 02ED
Signing time: Fri 08 Aug 2025 19:00:47 +0000
Manifest this update: Fri 08 Aug 2025 19:00:47 +0000
Manifest next update: Sat 09 Aug 2025 19:00:47 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: 93DrDHwkRixXwQgugCdIEnmlol9uXtJZnIYNneD0LfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:9f:6b:e8:dd:93:b4:81:37:ea:c4:fa:b8:13:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Aug 8 19:00:47 2025 GMT
Not After : Aug 9 19:00:47 2025 GMT
Subject: CN=aa1712df668c1121f4806cb9738807ae675a4cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:13:45:06:2d:c7:05:45:f6:06:40:1b:a2:
14:e4:18:da:08:d5:26:b4:0e:e8:bf:36:7f:7c:80:
e5:79:ed:05:23:f9:63:00:bf:5e:5c:27:15:74:a4:
d3:73:7a:8c:a8:5f:3e:57:30:4a:e7:69:38:95:6e:
1c:4d:eb:1e:d0:10:28:44:87:6a:af:da:6a:11:b1:
75:df:f4:65:01:62:b7:fa:be:a0:a7:e9:f1:db:07:
e4:1d:b7:c6:55:60:c8:e1:27:d7:71:31:50:ba:9a:
fa:9b:5e:4e:6c:68:cf:3f:dc:4f:a7:45:07:b4:f0:
5b:e6:e6:37:35:18:dc:eb:79:8c:f8:45:89:24:82:
b1:34:ab:fe:f9:63:17:a9:46:de:fb:03:e9:9a:3c:
bf:60:61:10:da:3a:74:e7:b7:25:43:fa:64:6c:9f:
9e:3d:6c:46:9b:f6:4e:d7:19:16:47:c0:01:43:47:
2a:ee:ee:fa:e5:87:b7:cf:07:f6:65:51:a4:53:99:
2f:5e:f5:25:dd:b1:a9:b9:f5:31:9d:4f:25:4d:1b:
49:e9:80:02:78:95:ca:b3:e3:e0:99:31:e9:a4:82:
70:fb:bd:0d:fc:22:43:c3:65:fe:ef:c7:ba:b1:11:
cf:87:8d:38:65:44:b5:4e:86:80:b7:d8:60:b0:06:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:12:DF:66:8C:11:21:F4:80:6C:B9:73:88:07:AE:67:5A:4C:AB
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:d1:ab:13:10:90:1a:dd:b6:b2:5b:7f:12:1a:88:cf:13:
8d:ba:c8:45:7b:80:9f:c1:73:c6:fd:f5:e6:7d:d1:89:09:0d:
77:9a:44:df:80:43:5f:61:a3:9c:56:df:37:24:7a:7b:22:1a:
da:43:f4:d7:74:2f:da:55:22:b6:34:f7:04:d9:9d:e5:20:69:
dd:78:44:30:34:8a:78:4f:41:8d:33:ce:ee:8a:06:8d:03:15:
6d:35:b8:a7:05:33:83:24:27:4d:46:64:1a:3a:02:6a:f1:e3:
15:e9:65:29:31:10:43:e6:c9:b2:43:46:9b:f7:43:32:f3:8e:
7b:b5:dd:6c:6d:4e:f1:5a:7b:47:5e:b3:e6:7a:32:d4:62:45:
fa:08:25:f9:71:6e:71:d9:c3:39:83:f0:aa:69:27:51:94:0e:
bd:d6:09:e8:d0:97:18:f0:6f:19:b7:1c:e3:7e:e1:ee:b4:e9:
54:fa:e9:97:e2:8a:ec:fc:e0:8b:8a:30:f4:8d:04:eb:6d:49:
f0:96:83:0b:95:cc:36:d2:20:9a:94:c7:07:b2:db:0a:1a:14:
b1:73:7a:da:2a:72:f4:a1:73:a1:9c:3e:1f:63:58:0f:f2:40:
cd:16:b7:ac:40:ba:47:98:96:61:3d:33:c0:11:bb:7f:a8:4a:
73:7b:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:44 2025 by rpki-client