
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: hnDkjWUIL7UthzrgQN/XXb6YcI4d9DuxtBmZoDkMfD8=
Subject key identifier: 77:A7:1F:F9:78:DF:00:20:99:B7:E1:40:3A:BE:01:A3:FA:0C:67:B9
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 01988168E9333E039584E994E4532A1C17BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 15AC
Signing time: Wed 06 Aug 2025 22:03:12 +0000
Manifest this update: Wed 06 Aug 2025 22:03:12 +0000
Manifest next update: Thu 07 Aug 2025 22:03:12 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: YbVhCBia9d7Qtm1eL/8I1GFE0fAFfO8CnA205qqugn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:e9:33:3e:03:95:84:e9:94:e4:53:2a:1c:17:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Aug 6 22:03:12 2025 GMT
Not After : Aug 7 22:03:12 2025 GMT
Subject: CN=77a71ff978df002099b7e1403abe01a3fa0c67b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:b2:94:0d:48:5f:15:18:64:b8:26:35:79:
71:d5:68:5c:d2:50:f1:75:62:9e:a2:ba:eb:25:a2:
6e:80:00:db:fc:11:ce:87:99:fd:36:71:39:e8:05:
c9:3f:90:53:1d:ae:6b:4c:b6:e2:89:2d:61:d6:fb:
85:86:7a:7c:09:a0:cd:7c:05:13:19:cf:4f:b6:62:
2a:10:bb:98:2c:8b:a2:e3:1c:04:1b:bd:4a:c2:4e:
6b:23:b5:02:60:a2:72:48:3f:be:1a:0b:0f:24:76:
17:73:d7:22:c8:7a:1a:5d:5c:a5:e3:66:5c:d3:c7:
70:44:9f:95:78:6a:e0:ef:95:27:e7:7a:e6:63:0a:
e6:46:48:7b:fe:b3:56:b6:16:3c:a4:23:91:ea:5e:
43:73:67:a0:a6:42:f3:b4:fc:53:c2:1b:e4:9f:ed:
73:ed:3c:be:7e:d7:5b:84:89:b7:61:95:55:b3:8a:
0c:be:2e:a7:87:a9:fa:5a:f5:8f:a8:5a:99:1b:7a:
23:a7:b1:74:ca:c5:4f:e3:4c:f3:12:85:57:b2:74:
e3:ef:14:45:67:85:b2:2a:3a:d7:5f:84:33:2b:d9:
2c:3e:b5:83:06:97:46:e4:5f:b7:6b:2b:d5:94:9e:
76:bd:88:bb:44:28:fa:ac:3b:00:e0:47:b3:83:c4:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:1F:F9:78:DF:00:20:99:B7:E1:40:3A:BE:01:A3:FA:0C:67:B9
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:08:04:2d:1e:fd:af:2f:41:23:1e:bd:b6:ad:9b:34:a6:
fd:15:e9:e2:da:41:3b:2d:e0:ae:92:64:38:e4:0f:b8:6f:30:
a2:59:74:a7:0e:cd:4c:ce:a1:6e:95:bd:44:7f:c9:49:4c:37:
2b:49:8d:37:45:0b:63:f7:2f:db:d9:17:35:33:9a:f3:6d:40:
d3:b1:63:d9:6d:2f:a7:33:01:55:26:0b:c2:87:a7:5d:50:ea:
df:82:02:4f:a9:21:4e:a9:ab:88:cb:3e:ed:85:99:c9:f2:23:
e0:3c:e4:fc:0b:c2:66:f7:12:83:e6:24:1d:25:17:06:92:ce:
b3:73:ed:17:f7:b6:b6:a4:6a:37:c3:14:67:08:d6:74:c0:12:
39:55:b2:22:1f:75:1d:8d:9e:ea:a8:64:3a:a9:57:89:01:97:
38:54:c9:38:d8:ec:05:82:c7:31:2c:a2:90:c8:9b:db:30:b8:
b6:b2:15:25:68:50:ca:16:70:a5:9b:68:6d:dd:b3:cc:fa:84:
4d:07:85:e7:17:04:4f:2f:f2:e4:0d:0f:6f:e7:ef:fe:27:81:
64:5e:d6:06:3a:36:31:0e:93:62:e8:a8:23:f5:55:40:52:d9:
1b:5c:d1:bc:91:f6:6e:cd:b0:21:05:95:c0:45:fe:cc:46:1d:
e6:8d:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:24 2025 by rpki-client