Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json)
Hash identifier: DqADMXU+hq8chq0Y1QWdkyVoyxKJPWH/hXFawR2ibGs=
Subject key identifier: CA:C0:D1:67:32:D4:9D:EC:66:30:98:B6:C1:80:91:46:7E:B8:2E:B0
Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Certificate serial: 0198A04E1987891AA84A7759ABE0AFA7555E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
Manifest number: E2
Signing time: Tue 12 Aug 2025 22:02:09 +0000
Manifest this update: Tue 12 Aug 2025 22:02:09 +0000
Manifest next update: Wed 13 Aug 2025 22:02:09 +0000
Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: LPI0ItvksyBmOlrXq78V2HkcTU/JiiStNVaQaoIVUmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:19:87:89:1a:a8:4a:77:59:ab:e0:af:a7:55:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Validity
Not Before: Aug 12 22:02:09 2025 GMT
Not After : Aug 13 22:02:09 2025 GMT
Subject: CN=cac0d16732d49dec663098b6c18091467eb82eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:e8:ad:74:0d:51:0f:40:7a:c9:3b:2e:e3:
4a:68:ab:81:22:2c:e6:cc:77:3d:96:8b:56:1e:3f:
9b:d7:01:19:60:48:69:02:75:ca:ce:d8:11:79:86:
48:53:dc:8b:7b:35:7c:b6:c5:53:7d:93:51:66:3f:
da:9d:bf:71:9f:e6:fc:01:c9:72:72:49:77:26:6d:
67:12:e3:36:20:80:47:f4:18:b3:a9:2f:76:46:12:
ad:bf:05:a6:54:9e:f1:a3:03:f5:56:cc:c2:28:60:
9d:de:d7:e0:8a:02:20:b4:0a:79:75:02:03:c5:a5:
8e:72:3e:e4:97:98:4d:fb:ed:c9:fc:f7:84:38:91:
a3:1f:b5:65:a3:14:9a:93:37:28:b5:58:92:d1:9a:
a2:e9:80:0b:98:38:a4:82:6c:53:c1:ad:d8:2f:fe:
8f:2c:43:cf:75:47:04:db:7c:45:3c:08:0c:90:9f:
2f:6a:a7:66:56:c8:85:3e:ec:f5:6b:26:71:d4:f9:
8c:76:43:20:09:ed:3d:36:9e:55:21:1e:41:e6:44:
6d:13:cd:02:c5:2f:98:ae:35:75:71:1f:d8:e1:88:
df:57:d1:e9:e1:40:f4:00:a3:e1:f7:a5:01:96:60:
d6:44:07:28:ff:d0:ad:d9:a6:cd:55:58:f6:8d:c7:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C0:D1:67:32:D4:9D:EC:66:30:98:B6:C1:80:91:46:7E:B8:2E:B0
X509v3 Authority Key Identifier:
keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:20:cb:bd:c4:22:6c:e2:78:b6:ea:1a:b2:ba:53:b4:08:6e:
a7:10:a5:b7:03:7e:0f:17:0f:c1:eb:f8:70:86:d0:92:3d:db:
db:a1:f4:81:88:42:f4:1a:c0:d5:4f:4c:74:64:eb:a8:2e:ec:
15:c7:dd:23:a9:94:5e:78:8b:ca:ee:c5:5b:97:21:d7:78:19:
25:92:2d:1f:80:71:bb:1a:f3:b4:89:09:b2:9f:7c:61:56:a3:
57:b9:3a:80:49:ac:14:33:a6:7d:34:aa:85:41:a1:a9:0a:4d:
b5:c9:fa:8d:96:79:ee:6f:0b:dd:29:06:be:df:ca:fe:3c:67:
ab:39:5d:2e:9f:c6:77:c2:77:35:88:81:fd:df:8d:71:6a:fe:
5b:81:d2:0f:ae:5f:d2:09:df:39:56:4a:a2:9f:a8:70:95:b4:
e7:d9:06:29:84:a8:95:d7:9b:df:e3:59:05:ed:8b:ff:f0:ce:
03:84:b0:42:66:ce:e2:4e:35:49:03:53:98:75:91:07:63:21:
13:3a:b6:78:7d:de:e9:b7:3d:44:cf:d9:07:e3:79:93:da:73:
c5:f9:cf:c4:26:0c:a4:28:45:67:c7:83:d8:31:36:31:de:e7:
c9:e3:a2:e3:72:8a:37:d3:f0:bd:9b:9e:9a:aa:54:1b:26:8c:
b6:0d:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:26 2025 by rpki-client