Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: ktsMBThui0LYrwSkYqdGUNrGmEPJxUTuGYekXs56JS8=
Subject key identifier: 76:D6:76:A2:0A:59:74:9B:98:C8:FE:89:F7:A9:F9:DA:52:F9:A3:24
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019894B808213D6940B60F4D2F503543E852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 16:02:25 +0000
Manifest this update: Sun 10 Aug 2025 16:02:25 +0000
Manifest next update: Mon 11 Aug 2025 16:02:25 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: zzCwMVEGbZZ2d3aPtx8mxC6nxZd8G4hiYsP90hJI3jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:08:21:3d:69:40:b6:0f:4d:2f:50:35:43:e8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Aug 10 16:02:25 2025 GMT
Not After : Aug 11 16:02:25 2025 GMT
Subject: CN=76d676a20a59749b98c8fe89f7a9f9da52f9a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:2d:5d:b2:50:13:19:50:a8:33:6f:ec:ff:
fb:46:8e:43:ce:0e:7f:c6:bc:eb:f5:48:f6:a6:82:
8c:d0:bb:dd:af:b5:30:98:a0:bf:3b:ed:b5:2b:e8:
2d:77:f0:63:b9:c4:af:68:fb:01:93:78:fb:24:bb:
af:34:61:77:68:9e:53:48:22:18:a4:57:fe:99:aa:
29:9f:85:19:3c:1e:18:95:8d:03:0e:05:88:1c:44:
f3:e7:3e:d2:22:db:c8:aa:94:0b:96:bd:ee:ea:a6:
b1:4c:bf:8c:53:a2:a2:61:e2:3b:fe:ad:c6:88:73:
f1:86:46:02:08:45:30:0d:be:5d:0f:ae:9d:35:7f:
49:ba:7b:d7:97:50:c0:5c:87:b0:f7:7b:9e:6e:7f:
d0:4e:2b:47:91:e6:4b:66:74:ca:0f:48:3b:4b:39:
e9:13:4e:d2:db:d1:35:27:7d:8b:e1:ff:05:31:ee:
1c:a1:cb:2c:d1:19:c3:3d:7c:7a:2b:53:93:8c:f2:
6a:ef:95:b1:c7:4c:1c:1e:24:13:76:84:b7:ea:0c:
a5:7e:c3:0d:3a:48:12:49:96:ed:ec:80:e5:55:63:
38:7a:97:63:0c:38:69:8e:ac:6c:cf:c0:34:c6:80:
a4:33:48:b7:44:2f:27:a2:4e:3a:26:9d:43:4f:74:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:76:A2:0A:59:74:9B:98:C8:FE:89:F7:A9:F9:DA:52:F9:A3:24
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d3:38:6a:85:ff:50:fb:0e:20:8b:f4:73:2b:41:27:42:8d:
a0:03:bb:e6:26:b6:27:79:17:50:f4:f7:61:b3:64:a4:88:1d:
b5:83:49:e4:aa:2c:41:6f:2f:05:3a:f4:2a:22:ad:10:30:7b:
cc:2f:a4:21:0b:c1:e4:d5:ce:15:6f:d2:0c:7e:27:1c:59:a0:
e7:df:d2:01:a6:b6:51:73:b4:13:ea:73:f4:ab:ea:70:34:5d:
f6:e1:8a:bf:ed:a7:1c:ce:a5:f2:9c:df:b9:98:83:2a:13:6e:
e4:7d:1b:f6:13:65:0c:7b:a8:44:49:14:6d:1a:1c:33:96:95:
d0:c7:f2:c2:09:f2:c3:7d:16:98:1a:e8:d0:04:52:95:f9:49:
7c:23:6e:e2:6a:c3:cd:25:36:99:9b:39:e8:b2:3e:03:05:41:
d8:bb:35:3d:3f:8b:92:ea:d7:3e:9d:7e:a3:4e:0e:a7:95:6b:
7b:06:98:e1:73:36:17:49:dc:73:24:43:8a:98:58:c3:55:21:
47:05:e2:8c:65:db:a9:7f:e7:65:3f:6d:04:b2:61:13:39:a7:
31:36:53:35:4e:19:45:78:c8:8f:ae:fb:da:3e:fa:25:84:0a:
05:57:23:54:ca:9e:66:05:b6:10:e6:b3:7a:ee:0a:b5:75:d4:
86:4b:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:47 2025 by rpki-client