Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: KVgzdJhbs/CCMyEq+Rr2OfXqq+o6srxYkobC9b1Dm04=
Subject key identifier: A5:1A:C3:E9:B3:88:EC:29:22:EA:6E:67:D9:C9:1B:B6:A6:B6:20:A6
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 019872D01E11582F6FA9F8452F9D8E5B70D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 0437
Signing time: Mon 04 Aug 2025 02:01:38 +0000
Manifest this update: Mon 04 Aug 2025 02:01:38 +0000
Manifest next update: Tue 05 Aug 2025 02:01:38 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: YrHbxHJjEy7We+ZTtDtgtCIEf0itBqwn0IgrUr+yoIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:1e:11:58:2f:6f:a9:f8:45:2f:9d:8e:5b:70:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Aug 4 02:01:38 2025 GMT
Not After : Aug 5 02:01:38 2025 GMT
Subject: CN=a51ac3e9b388ec2922ea6e67d9c91bb6a6b620a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:c6:44:46:0e:ad:5f:85:5e:f9:89:e4:75:
38:dc:44:69:85:95:d2:4c:1d:76:ee:5a:25:3d:31:
67:a1:de:da:d2:77:ad:ec:b1:9a:82:08:49:7d:39:
0f:f7:7b:07:0c:34:25:f9:95:d4:57:89:8c:ae:10:
b0:8f:94:a3:a5:1b:9c:59:23:6a:93:b4:e5:3a:63:
d0:79:2b:85:1a:dd:85:73:7a:5d:da:c0:49:e6:fc:
35:c2:a4:6a:92:c3:0e:cf:28:be:56:a7:71:88:d2:
71:c2:55:17:bb:d0:4b:d4:5e:af:c8:c5:58:f6:f1:
62:5c:b2:7e:fc:3c:f4:c0:9b:7b:5a:99:5e:43:56:
a1:97:3e:85:c5:84:32:7d:37:a4:84:f6:42:cd:d0:
9d:22:7b:de:a4:9e:b8:01:bf:2e:54:ee:78:d5:23:
6d:7a:0e:a5:59:8c:81:9f:a2:ca:25:29:11:39:bc:
a6:33:ae:d3:dc:ce:3d:aa:a8:a7:14:50:8a:29:d1:
c6:1a:f3:d3:b8:53:94:c4:5f:bc:a7:22:1c:c8:9a:
73:a9:1e:29:6c:58:b8:2e:44:0d:91:a1:4b:79:cf:
c4:7c:ab:51:33:d9:7b:a1:b1:9d:24:11:09:e2:a7:
52:34:4a:1f:50:64:d1:4b:61:ef:57:cc:10:c9:13:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:C3:E9:B3:88:EC:29:22:EA:6E:67:D9:C9:1B:B6:A6:B6:20:A6
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d5:e5:a8:3b:b9:cb:de:76:31:1a:46:1e:a9:db:e0:71:8b:
9a:fa:f2:5d:0f:c3:65:01:a3:6a:92:04:a3:2e:18:ba:c5:39:
7a:c9:7a:5b:53:10:62:8d:12:50:67:f7:72:52:8c:32:af:83:
92:fe:3d:61:c9:76:78:68:da:ad:a9:b2:be:1d:5e:3b:ac:34:
86:60:9c:d5:bf:90:25:f0:f5:91:5d:6c:4a:05:fd:d2:99:19:
95:b5:be:61:a2:f3:34:50:08:aa:c2:d5:6e:fe:7e:f1:6d:f4:
11:76:e6:f8:f6:1b:2f:6a:87:db:27:1f:ef:54:55:bc:ce:d3:
b4:2d:b2:5d:bf:7f:ee:54:0d:a4:2e:29:6e:2a:78:c5:1f:52:
34:84:19:d4:90:92:b7:0c:e1:a9:62:84:74:e8:a6:29:ff:f1:
2d:26:eb:34:47:4e:e4:29:09:54:6d:fd:68:4b:a4:60:f3:bd:
c2:36:3e:ea:71:98:0b:17:6c:0a:4c:f7:90:6d:be:68:ab:6b:
47:3b:69:97:0c:47:0a:0c:cd:e2:16:0b:a4:f2:a7:b0:01:b5:
fd:7a:1c:8d:10:3b:11:94:c4:12:d8:a6:a9:8d:be:9c:ce:71:
2c:ce:a1:96:40:7e:27:0e:2a:29:e5:fb:15:75:68:21:d9:2a:
61:6b:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:48 2025 by rpki-client