
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: BD1oxdtdMcmQonuD0uEKmZXAD4TKuI0Zh6cW7aJ7Qi4=
Subject key identifier: 66:4B:23:CF:FA:1F:66:55:0E:F8:B1:4B:34:6C:7A:BF:E3:03:AA:C4
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 019874F48A2CEFD96ECA866040E8D03C7901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 0201
Signing time: Mon 04 Aug 2025 12:00:39 +0000
Manifest this update: Mon 04 Aug 2025 12:00:39 +0000
Manifest next update: Tue 05 Aug 2025 12:00:39 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: JToXmVc7bOLQac3IVc7MSLholUmYozvy1f6Om5mRDxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:8a:2c:ef:d9:6e:ca:86:60:40:e8:d0:3c:79:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Aug 4 12:00:39 2025 GMT
Not After : Aug 5 12:00:39 2025 GMT
Subject: CN=664b23cffa1f66550ef8b14b346c7abfe303aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:6d:02:38:f6:99:6b:e8:c8:87:d4:a2:60:
01:16:e0:86:9c:32:0a:f2:cd:f6:cc:f8:09:74:01:
0a:d2:bf:40:b2:8a:17:05:8b:6a:f2:48:dc:44:4c:
a4:01:e5:d4:9d:b4:41:7b:2a:4e:17:8c:53:45:06:
5a:9a:13:06:51:69:3d:29:87:bc:f3:63:9a:48:36:
ec:3f:03:a1:c0:30:86:aa:5e:33:8a:d0:d8:34:12:
6a:6d:de:2b:bf:c6:45:13:97:4e:aa:52:92:96:aa:
9f:78:5e:69:0b:dc:36:f6:e6:32:d2:51:d0:fc:ba:
25:f5:b6:7e:f3:8d:5f:aa:cf:03:49:b9:23:93:85:
e4:68:b5:f1:21:2f:23:73:06:24:27:c0:df:ab:96:
de:64:28:c5:3d:26:82:97:31:40:37:d9:f8:3b:a6:
63:75:55:97:f5:73:88:a4:6d:f8:cb:80:21:c2:cb:
04:18:06:29:1f:a4:5b:9f:fc:50:a0:0f:f8:f0:52:
78:c7:52:84:a4:68:98:c5:c4:c9:00:c7:bb:62:19:
b3:0a:de:db:ce:39:03:1a:5d:cc:7d:24:90:e6:be:
6a:02:b3:cd:e9:d3:57:de:0d:92:12:21:81:28:3a:
27:7e:ff:e0:78:4b:9c:bc:4f:eb:36:79:7e:9c:71:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:23:CF:FA:1F:66:55:0E:F8:B1:4B:34:6C:7A:BF:E3:03:AA:C4
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a9:f6:8d:74:8b:a1:7c:f1:bf:de:82:66:fc:9b:ec:a8:4d:
84:c8:ac:ec:83:5a:fb:5d:f4:cb:f7:9b:dc:38:c0:5e:2b:2a:
a0:12:9a:7c:27:74:63:2f:69:86:6a:71:6f:51:04:77:fc:bc:
99:c0:7f:8e:f2:d1:90:65:74:9d:41:90:4d:3e:a2:d4:e7:27:
79:61:2f:85:cb:4a:89:84:f1:9c:e6:c9:d3:c0:cf:fe:cd:8e:
23:61:7f:63:b7:50:10:cc:ed:69:67:61:e2:98:ea:ae:52:65:
64:8e:1b:05:e9:97:35:4e:83:fc:ac:26:d3:e3:ec:6d:dc:79:
dc:14:a2:29:d0:11:fd:35:9a:1a:f2:6c:ca:f7:e4:e1:a2:2b:
60:6a:63:9a:de:b7:7b:d0:a1:3b:65:20:76:f7:50:4e:12:54:
cd:66:5a:40:21:5d:49:b8:6a:27:e6:0c:f3:66:34:28:fc:f8:
ed:10:a6:0a:0a:db:c2:1d:a9:f4:04:5c:b6:73:8e:81:36:37:
81:31:c5:75:90:af:78:ce:01:c1:e2:1b:6f:37:c2:21:02:b4:
a1:57:e3:b6:be:95:34:74:97:df:8b:e0:17:be:6f:94:a7:6d:
f5:4c:6d:8d:9e:f0:b9:2f:eb:df:9b:54:73:ab:73:28:52:04:
a0:35:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:33 2025 by rpki-client