Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: h73FwKjw92Q8kyBEsFHJnTi5CqXePyT7OsqX0dedgUg=
Subject key identifier: 81:F5:B7:A1:49:40:E4:79:7C:C8:74:C4:EB:B9:27:BE:5C:A8:FE:EE
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 01988B0F7B19E307F437528BB80682BE4247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 19:01:44 +0000
Manifest this update: Fri 08 Aug 2025 19:01:44 +0000
Manifest next update: Sat 09 Aug 2025 19:01:44 +0000
Files and hashes: 1: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: mLOMRfhN0rw+QSnAXZwWkgqVO2LQ5OhtzQyEo/u7pkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:7b:19:e3:07:f4:37:52:8b:b8:06:82:be:42:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Aug 8 19:01:44 2025 GMT
Not After : Aug 9 19:01:44 2025 GMT
Subject: CN=81f5b7a14940e4797cc874c4ebb927be5ca8feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:b6:ec:59:f5:e9:a6:d0:27:4d:b3:09:f0:
6c:af:48:47:27:44:c2:31:4f:aa:6f:0e:38:14:48:
c1:52:ae:51:99:62:49:ad:fc:cf:87:79:ab:93:41:
f4:ae:6e:d8:24:0b:1d:f0:61:87:c8:ca:cb:3a:89:
6c:13:4f:f4:c9:4b:44:52:ed:47:f8:58:7f:bb:d8:
72:b1:de:dd:96:8d:3e:31:fd:3f:6f:65:69:05:ac:
b1:2c:d9:74:05:67:68:51:82:54:5d:c6:51:fb:ad:
43:15:85:2f:83:e4:c7:2d:b7:4e:68:f1:d6:48:3f:
ff:0e:78:32:5f:05:ff:a8:40:f1:dd:be:6d:f0:97:
c8:25:63:4f:a8:77:87:70:2b:82:e1:7b:ba:1e:c3:
1f:f2:0e:e6:8f:a4:49:1c:34:23:4b:1f:c0:de:43:
3e:f8:12:b8:3f:5c:e5:47:c9:21:fa:67:14:1f:16:
71:62:a7:ff:c9:3b:a8:3f:42:a3:fe:af:a9:75:09:
79:da:11:05:34:87:f0:d1:79:f1:02:dc:76:8a:f6:
e9:8c:73:29:a1:cd:6d:f3:3c:79:e3:7c:a5:30:2e:
27:92:60:a5:4e:a5:43:32:db:b9:35:c4:a6:f2:6e:
60:83:c3:32:a3:d8:39:26:ea:24:92:b6:67:4b:de:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:B7:A1:49:40:E4:79:7C:C8:74:C4:EB:B9:27:BE:5C:A8:FE:EE
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d6:77:34:42:3c:f2:e9:9f:04:9b:b7:64:53:20:48:cb:72:
f4:93:37:46:e4:70:c8:2a:f9:be:13:91:c4:02:17:0a:e3:95:
c3:27:a9:c5:70:ab:a0:1b:2c:e5:86:db:e1:d8:69:bb:99:76:
71:10:d1:fe:a4:ea:b7:40:da:c3:be:05:58:34:60:a5:a5:ae:
05:15:42:10:b5:22:c2:db:0f:5c:26:bd:0c:50:dd:3d:3a:b2:
57:be:f8:6b:78:a1:b9:37:e0:06:fd:a8:53:32:fd:c9:2f:3c:
d5:87:12:c8:b5:88:41:8a:48:db:ca:e8:e0:6b:76:1c:fc:40:
fa:06:b2:0b:62:79:f1:e4:65:6e:72:9b:76:01:c4:d5:42:a3:
b3:6c:20:7f:60:da:b3:27:39:97:bd:32:36:a0:0f:65:9a:48:
8c:9a:25:fb:94:70:8e:31:f8:37:ec:eb:a7:2c:84:89:b1:8b:
10:18:68:7d:26:53:cb:19:82:eb:e5:47:ef:b7:64:45:6e:f1:
3f:4a:cb:5d:cc:18:c8:29:1a:04:cc:5e:26:fb:4a:de:67:aa:
aa:29:e9:e9:31:52:3d:2d:5d:1c:c1:c4:5d:ff:9b:6b:9f:a8:
e1:f8:97:b3:72:ad:9e:04:11:59:32:61:87:85:7e:72:d4:c2:
8c:43:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:25 2025 by rpki-client