Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File: eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier: 2kEwYkL9hmLYgXPYT4HgWr/ZBI7+MYB1shd/0M610G8=
Subject key identifier: C5:EF:F7:A7:DA:79:1C:31:68:B0:AB:61:C3:67:36:B4:6E:5A:B4:56
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer: /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial: 01988E471DC9C318FCE36141B73BA07C9FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 10:01:21 +0000
Manifest this update: Sat 09 Aug 2025 10:01:21 +0000
Manifest next update: Sun 10 Aug 2025 10:01:21 +0000
Files and hashes: 1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: K6NmlyVMcwsy3M1JG4KHCjHXDLjpuV5q/ULbWuU9ZcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:47:1d:c9:c3:18:fc:e3:61:41:b7:3b:a0:7c:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Validity
Not Before: Aug 9 10:01:21 2025 GMT
Not After : Aug 10 10:01:21 2025 GMT
Subject: CN=c5eff7a7da791c3168b0ab61c36736b46e5ab456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:16:3e:54:67:3e:76:c2:66:21:f5:bd:cd:
ef:e3:9b:30:17:fa:50:d1:16:90:1f:12:54:e6:45:
27:2c:f5:ed:20:00:7b:2f:d2:01:13:ba:cd:bb:71:
0e:1f:d1:78:c9:a5:2e:46:ad:98:78:22:65:55:19:
3d:11:4e:17:3c:dd:dd:b4:55:12:1c:26:4b:39:41:
e0:87:7d:af:fb:c2:73:82:85:d5:4e:59:df:e1:8b:
e3:e7:24:c3:1d:f1:92:db:14:34:3b:77:58:91:4f:
96:4f:f8:c5:bd:1d:5d:08:9b:20:65:0b:3d:69:65:
8c:2d:48:cf:f5:d7:8c:9a:e9:d5:b2:76:33:b8:f2:
64:af:27:25:f7:d0:9f:44:bb:73:71:a2:8c:be:3f:
7a:df:eb:49:c3:db:81:5c:7d:8a:fb:ad:e8:4b:f5:
bc:53:5e:06:23:1c:86:64:e0:df:4a:b2:01:38:11:
83:08:59:97:ee:1d:c8:da:b1:a3:b7:43:be:ec:8f:
46:14:17:c3:b4:d2:2e:4b:38:1f:73:d1:bc:fd:d2:
3a:62:de:8c:0f:e7:c8:8e:f6:4a:37:5d:73:00:2c:
78:13:f3:6d:33:38:84:e0:ed:03:e9:a4:f7:28:26:
75:61:b8:41:d3:39:25:46:6c:9f:39:6a:19:be:d1:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EF:F7:A7:DA:79:1C:31:68:B0:AB:61:C3:67:36:B4:6E:5A:B4:56
X509v3 Authority Key Identifier:
keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5a:93:58:58:17:b1:2d:ac:aa:85:76:89:11:01:b7:82:91:
7f:37:d8:b5:80:10:d2:b9:01:d0:cc:40:d9:06:9b:8b:a4:26:
41:3a:27:e5:05:46:82:6b:a6:f3:d4:2f:92:cb:b1:61:ab:89:
17:78:18:be:b3:f8:e7:34:77:de:75:dc:51:d9:1d:aa:d0:fb:
ef:d3:61:dd:eb:cf:49:c4:33:72:f6:9a:16:1f:01:d5:46:19:
c2:df:29:ad:2b:71:75:54:5b:9a:61:72:0d:e7:5f:9a:36:af:
af:84:ea:b4:8a:68:58:b5:3f:7d:ed:72:f0:33:02:22:97:09:
90:1d:16:63:70:61:34:e1:98:46:f6:2f:59:ed:47:c5:77:3a:
7f:78:07:88:81:c4:5f:63:90:87:0c:51:f1:37:13:49:00:54:
16:e8:7e:c1:dd:6a:e2:6d:19:f3:55:33:99:80:cf:81:2e:12:
a4:2a:57:42:10:47:4d:03:69:5c:08:f9:4f:b6:25:f7:9e:18:
cd:e7:01:a4:a5:6a:69:17:40:f3:16:d5:5d:d2:d6:24:8c:57:
54:11:a8:50:4b:15:39:3a:e1:38:45:e1:a6:77:44:87:51:9c:
ba:ea:9f:55:e0:1b:8c:c2:70:28:4c:19:38:76:a1:6f:1f:cd:
72:c3:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:53 2025 by rpki-client