Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier: cqYTa7gBw1asxkdeAZ6yf9Qa6pOUEK8jtYjBHEJ76xQ=
Subject key identifier: 84:DC:14:4D:B9:6C:46:E8:E2:7A:3C:4B:E6:32:8D:34:9F:93:49:AA
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial: 0198941252CEBCDFD67D6FD33C1E14207AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number: 138D
Signing time: Sun 10 Aug 2025 13:01:25 +0000
Manifest this update: Sun 10 Aug 2025 13:01:25 +0000
Manifest next update: Mon 11 Aug 2025 13:01:25 +0000
Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: KZHB7LBRaSgkeIbxgiJAdMdoRircOevNfDjBZcOTE9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:52:ce:bc:df:d6:7d:6f:d3:3c:1e:14:20:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Validity
Not Before: Aug 10 13:01:25 2025 GMT
Not After : Aug 11 13:01:25 2025 GMT
Subject: CN=84dc144db96c46e8e27a3c4be6328d349f9349aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:74:13:48:c6:ff:b6:bb:02:36:42:38:36:
9f:d5:af:78:cf:bd:f9:e8:a4:53:76:e3:1e:0c:db:
55:64:bd:e1:2e:f4:70:ce:e8:09:39:29:1d:8b:66:
4e:b1:65:7a:51:ed:dc:73:34:a1:9d:7c:e1:eb:40:
bc:66:7b:30:16:b4:30:84:80:b1:3b:3f:f6:5b:65:
0f:c9:88:64:5e:99:eb:19:15:e8:27:7a:9c:68:a2:
72:11:3c:a0:b0:f5:44:85:f9:95:cf:2b:64:cd:e4:
98:c4:ed:c6:ad:f9:28:6f:ca:cc:cd:a0:95:bc:89:
2a:6e:6c:cd:94:e5:c1:9e:a1:f2:4b:77:44:4a:06:
14:84:34:ae:36:50:f9:dd:f5:b4:39:1d:ee:f6:aa:
fd:97:3d:d0:b7:18:71:0a:b8:2c:6f:cb:6f:cc:e8:
9f:77:f0:d3:2a:8e:81:76:77:77:6b:93:a9:40:d9:
72:76:ee:cb:7f:ec:11:65:e6:d1:9e:0e:fe:d1:dd:
4d:be:d9:a2:ec:04:d3:95:73:41:54:9c:ff:3a:c2:
3b:8e:e7:51:da:c1:ad:65:a0:ef:cf:28:f8:94:1c:
f1:bb:3d:8a:b1:fd:3a:5e:8d:05:b2:c6:68:cc:38:
bd:88:ec:dd:67:6f:84:f6:45:c9:88:d9:a3:83:b3:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:14:4D:B9:6C:46:E8:E2:7A:3C:4B:E6:32:8D:34:9F:93:49:AA
X509v3 Authority Key Identifier:
keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3b:79:ed:fb:4e:80:39:ff:50:d8:b7:b7:9c:fd:96:85:ae:
2c:70:2c:3b:a5:90:bc:b3:59:c2:ba:d2:55:1c:df:58:dc:b5:
c0:5a:8f:fa:86:ca:31:35:5b:cc:8b:15:f1:a7:95:78:2c:74:
d5:07:ee:14:5a:21:a7:a2:73:e8:42:49:8c:c6:3f:b7:24:8e:
08:18:e9:7b:9a:fc:93:8f:59:c9:c3:24:37:3a:6e:10:53:b0:
73:21:8b:44:07:fd:e8:ca:01:81:61:ff:3e:05:ba:de:01:af:
69:8f:29:18:a1:d4:1a:28:f3:89:67:65:69:73:63:2b:10:57:
6a:2b:e6:41:75:c7:1a:b9:c2:13:4b:8e:3e:e4:17:d3:71:02:
9d:ff:6a:b1:78:40:47:45:5e:7b:f2:1b:ad:f1:e4:a8:8c:6c:
d0:4f:cd:de:c0:fc:5b:a5:a3:c6:31:08:b6:a7:f0:3b:ad:e2:
2f:8a:c8:2c:85:9a:d9:b4:15:26:57:0d:34:31:e4:2d:7d:01:
c8:1a:e2:8c:68:d1:4c:8c:80:d1:6b:99:7c:ad:c3:3a:a5:21:
75:37:6e:7f:bd:cd:6e:34:3f:bb:28:a9:47:04:92:87:07:ee:
f7:a4:6a:2c:90:a8:cf:be:b6:82:3d:9d:91:bb:57:85:71:21:
ef:36:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:55 2025 by rpki-client