Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: 0vgRDLKu8BFGSFTYTYVWH6P1EA8GMyjIkJlSwBBjdn8=
Subject key identifier: E7:1A:7B:08:4A:D0:3E:C0:74:EB:CB:74:52:D2:E1:AC:CB:01:05:CA
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 0198A084114AA3EFF228FEAED84C1BE767B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 0140
Signing time: Tue 12 Aug 2025 23:01:06 +0000
Manifest this update: Tue 12 Aug 2025 23:01:06 +0000
Manifest next update: Wed 13 Aug 2025 23:01:06 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: 3PVbLWxtzucmj730KhafX3szR++1y404Tznj0L7oUcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:11:4a:a3:ef:f2:28:fe:ae:d8:4c:1b:e7:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Aug 12 23:01:06 2025 GMT
Not After : Aug 13 23:01:06 2025 GMT
Subject: CN=e71a7b084ad03ec074ebcb7452d2e1accb0105ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:a8:69:75:5d:66:1f:44:d0:14:51:2f:9c:
16:25:67:0a:13:4e:be:d4:e6:f3:63:85:28:03:b7:
0f:ad:9b:e1:49:e0:d4:45:b1:77:67:fd:e5:9e:dc:
97:77:a6:da:70:7b:98:bc:68:1b:d9:a2:4a:b6:d9:
e6:fe:ba:f6:36:a6:23:df:23:b3:de:b7:0e:31:c1:
ad:eb:30:3a:47:8a:68:f4:ba:fa:ba:5c:74:b3:54:
a4:d4:91:fe:4e:3e:9d:1a:d7:6f:fa:cf:a0:2f:2e:
67:bc:c0:9f:84:1e:7c:f5:8c:a5:6a:c3:21:c6:6e:
88:32:14:e6:9b:bd:c4:e2:6d:99:19:82:d5:6d:80:
ba:33:dd:50:f3:5d:6a:60:ed:b6:c4:5f:ed:06:ed:
82:22:46:dd:f2:f9:a5:06:2d:f3:89:f3:64:d3:82:
ec:25:45:2a:a0:7d:28:fc:8d:38:a3:41:98:a6:37:
23:98:17:af:3c:44:9f:54:8b:ec:22:c6:54:23:d6:
6c:be:93:ab:f6:43:b3:0c:7d:7f:cd:74:1e:aa:ff:
7f:a1:fe:33:e2:4e:b7:6f:36:bd:ea:b8:6b:46:0c:
4b:fe:9f:48:58:d7:ce:85:4e:5f:2b:e0:f2:1c:6a:
c9:98:d1:2a:e1:9f:f3:a4:6b:93:18:94:de:24:f2:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:7B:08:4A:D0:3E:C0:74:EB:CB:74:52:D2:E1:AC:CB:01:05:CA
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:a0:98:1a:ca:b4:1e:94:7a:70:9d:40:61:36:64:08:7d:
96:d2:7b:fb:fd:db:e2:1f:45:8c:49:44:1f:9b:61:d0:10:1f:
03:f3:c4:5e:1c:3f:1e:96:9d:90:19:53:4e:e6:e5:0f:38:0c:
fa:dc:de:3d:ab:37:a3:99:38:c1:b0:64:81:c5:f4:f7:c7:15:
ab:3f:f3:87:02:3c:27:60:f7:aa:f0:ea:92:dc:bb:a2:35:e5:
0b:38:45:65:3a:70:af:a9:38:62:e4:ca:a5:d8:8b:fa:87:62:
80:10:53:fb:6d:f3:94:dc:30:59:66:eb:bd:af:56:be:2a:48:
7b:70:07:05:b1:ed:c2:32:3d:a8:e6:ed:cb:10:7c:93:ec:f9:
f6:03:27:f8:7f:7a:04:7d:ef:de:6a:97:0d:7d:0e:90:cd:26:
6c:86:ae:11:ed:c7:cd:29:01:8e:18:68:6d:1a:c1:d3:b0:3a:
5b:ab:3b:b1:eb:f3:f9:cf:75:e8:d2:3b:f6:d2:a0:48:42:48:
87:a0:00:61:7e:dd:4b:23:20:96:ae:fb:32:5e:2d:41:aa:80:
70:c8:cb:a6:1d:0e:2c:0b:76:d6:4e:8b:4f:8b:9b:b3:f3:bf:
35:33:98:25:51:73:93:b3:66:40:8b:fa:fb:6e:54:5e:c6:12:
57:d9:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:43 2025 by rpki-client