Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
File: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json)
Hash identifier: 2KbzCL4aYQzZOwRh9T2uBP17Yzk1WheXTNr140bHyho=
Subject key identifier: 7C:28:B3:93:FB:C1:0D:88:4B:5A:F4:F9:83:2F:B1:5B:3D:9C:B1:C2
Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Certificate serial: 01988EED0039C7871CB67E4FA8C93FD9BB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
Manifest number: 143F
Signing time: Sat 09 Aug 2025 13:02:33 +0000
Manifest this update: Sat 09 Aug 2025 13:02:33 +0000
Manifest next update: Sun 10 Aug 2025 13:02:33 +0000
Files and hashes: 1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: 5rB0FvhrAN3K1PBdS9lQxxvJhEbkhFVdvGs+q4UoHYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:00:39:c7:87:1c:b6:7e:4f:a8:c9:3f:d9:bb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4
Validity
Not Before: Aug 9 13:02:33 2025 GMT
Not After : Aug 10 13:02:33 2025 GMT
Subject: CN=7c28b393fbc10d884b5af4f9832fb15b3d9cb1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:13:a3:97:d0:d5:c1:eb:33:66:a5:f7:72:
b1:b4:ad:11:26:ea:e0:1f:8e:1d:1c:5c:6f:9d:5e:
ef:09:08:7f:0c:9c:f7:9d:9a:6c:0b:f7:65:fa:a1:
2b:82:41:86:fb:f5:ec:73:04:d6:9b:8b:0b:de:ac:
90:a7:af:66:7a:23:4c:20:98:b6:9c:a2:9f:e2:c2:
66:c6:5e:fa:63:9a:cf:c9:5d:6c:5c:71:71:48:4c:
f3:a0:ba:90:fd:7f:37:65:20:07:4d:05:dd:3c:23:
d8:fe:db:51:84:28:bf:ad:f1:bb:55:0b:d5:26:fd:
a7:9c:3f:92:90:0c:62:9c:9f:30:2c:97:11:52:aa:
37:0e:9e:69:f5:d2:74:3b:e9:ad:06:e2:70:fb:c8:
0a:5f:c2:0a:50:3e:7b:41:d9:95:00:da:09:e6:5b:
52:9b:1b:c3:12:06:14:be:5a:d3:16:f0:a3:0b:69:
88:4c:f4:5b:47:be:c2:9e:ef:b1:47:df:ce:1b:73:
8c:08:f3:14:49:48:39:9e:8a:f9:28:bf:30:7f:24:
bf:16:a0:48:d7:6f:83:11:92:d2:83:6d:67:29:07:
9b:b9:ba:93:e5:78:20:cc:ed:47:65:8b:3c:38:ed:
4e:07:96:18:c2:27:95:f0:3e:cb:4d:2e:b8:e0:ed:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:B3:93:FB:C1:0D:88:4B:5A:F4:F9:83:2F:B1:5B:3D:9C:B1:C2
X509v3 Authority Key Identifier:
keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:ca:2a:42:38:be:4c:c5:ac:ab:61:3c:66:07:d0:c7:d9:
0e:6a:61:02:d4:8d:fc:58:06:e5:83:53:15:d4:18:f2:f3:b2:
af:dd:bb:e7:b6:f1:ba:18:fe:c5:bf:e1:cc:04:04:b5:80:fc:
e6:cd:dd:a7:d1:22:61:c0:70:02:ca:1d:6f:91:82:32:9d:68:
24:a1:98:88:af:c4:55:af:87:9a:13:3e:e3:a2:7e:71:4d:70:
e6:ae:00:b7:f8:35:7e:d1:d1:9d:d5:75:4c:43:93:ce:f6:be:
90:29:1e:82:3d:46:d1:c0:11:9d:4e:b5:f6:30:4f:59:66:4d:
c0:00:91:39:42:d5:95:5e:25:0b:52:2c:d9:30:6b:56:37:f5:
b7:49:67:44:9f:de:f9:a9:42:fc:d8:c0:47:68:da:90:3f:cc:
18:12:f9:63:53:c3:08:d7:78:37:66:12:79:0d:b5:9f:d3:31:
d8:0c:1b:89:6b:e0:09:d5:e7:c2:0c:46:08:a8:53:79:62:f0:
52:e5:a2:e4:d7:d6:94:0e:e3:9e:02:be:53:6f:71:f9:1e:01:
9f:83:55:61:42:b9:f1:e4:93:24:27:0b:05:b6:c9:ec:46:a6:
66:bd:ff:9a:c6:fb:37:26:6f:7f:ef:b3:6e:6d:d3:15:84:11:
b3:c1:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:30 2025 by rpki-client