
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
File: ezR3xSqsENrC7dQXOrbZTV4k3vU.mft (raw, json)
Hash identifier: nb7nG8AF4oRaNsGxY4wALEhBgRGJxkcseH81YUA9kqE=
Subject key identifier: CA:36:67:4E:EB:65:F9:01:0B:20:30:38:28:E1:B9:8A:CE:56:37:ED
Authority key identifier: 7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
Certificate issuer: /CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Certificate serial: 01988BEAD623FF73AC15C7C246F37B001377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
Manifest number: 0644
Signing time: Fri 08 Aug 2025 23:01:19 +0000
Manifest this update: Fri 08 Aug 2025 23:01:19 +0000
Manifest next update: Sat 09 Aug 2025 23:01:19 +0000
Files and hashes: 1: ezR3xSqsENrC7dQXOrbZTV4k3vU.crl (hash: q0TKPVjoO2Bt7smJ7elIeIHdmXBnMlHpah+jeGFIrWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:d6:23:ff:73:ac:15:c7:c2:46:f3:7b:00:13:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3477c52aac10dac2edd4173ab6d94d5e24def5
Validity
Not Before: Aug 8 23:01:19 2025 GMT
Not After : Aug 9 23:01:19 2025 GMT
Subject: CN=ca36674eeb65f9010b20303828e1b98ace5637ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:db:25:8b:03:c9:45:8c:48:be:e3:90:08:
ef:4d:52:da:b7:a0:d0:0d:f0:e5:9f:82:63:b6:f3:
5f:07:95:be:37:6a:60:55:8d:1e:f8:fe:84:f9:23:
91:65:5d:e0:c5:ea:7a:3d:9f:7d:e0:16:1f:56:52:
9d:8a:4f:f7:c2:c5:00:7a:c9:e3:0d:d9:8e:14:63:
0b:e8:8d:38:89:36:12:be:e4:04:c0:45:f9:d6:4d:
8c:0b:fa:d3:a2:e2:14:4f:d8:b3:44:67:30:76:0b:
a9:41:99:8d:4e:40:ce:7e:1c:fd:b5:99:20:ba:65:
ef:6c:6a:7c:fa:c6:23:ba:d7:a2:c0:06:0e:cf:6c:
b9:f4:f3:88:dc:5f:74:1d:2e:b8:b1:9b:f0:14:b1:
50:7d:72:99:89:87:a6:21:0d:ad:c9:31:ee:44:7b:
d0:7e:34:3c:64:5c:34:d8:a7:d5:61:7e:cb:0c:93:
62:fe:b2:a7:17:95:a8:d5:e2:32:1f:28:5c:8f:a2:
69:27:4e:80:4d:7f:cb:3b:6a:2d:79:74:6f:7e:f7:
c4:62:99:28:1d:78:56:58:89:84:9f:20:8c:ed:64:
97:98:53:f1:eb:fc:10:15:ec:e4:6c:78:43:7b:8c:
23:30:28:ca:ba:85:71:d9:a7:95:de:3f:d5:d8:f0:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:67:4E:EB:65:F9:01:0B:20:30:38:28:E1:B9:8A:CE:56:37:ED
X509v3 Authority Key Identifier:
keyid:7B:34:77:C5:2A:AC:10:DA:C2:ED:D4:17:3A:B6:D9:4D:5E:24:DE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezR3xSqsENrC7dQXOrbZTV4k3vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bca347-983a-4c1a-88b8-cc69a2386edc/1/ezR3xSqsENrC7dQXOrbZTV4k3vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6d:0e:4b:27:a1:a8:d7:7b:4d:a5:a1:84:db:1c:12:1b:f1:
21:bb:0a:19:06:bf:cb:a2:f1:57:f0:ae:23:e9:8e:2d:da:e8:
f2:86:0b:82:86:b4:51:02:c8:60:08:e3:4f:79:e2:70:f6:d5:
a0:67:89:b0:95:30:ff:39:6b:01:b9:df:20:3a:14:48:a6:57:
21:f8:f2:a3:b3:23:08:80:b3:c4:d8:7a:92:11:99:2e:20:1c:
33:07:de:27:70:fc:4b:31:7a:d3:4f:55:a8:94:09:70:58:4f:
10:7d:ce:46:7b:eb:46:53:45:34:9b:85:a5:fa:06:56:f5:cb:
ff:46:26:dd:08:2e:c3:eb:c0:1d:20:5f:5b:be:0b:46:ec:7d:
bc:1c:35:b0:7d:a5:1f:49:7e:17:10:cf:d1:ea:b2:29:87:48:
16:e8:ab:df:b1:fc:25:b8:02:a8:ed:58:b3:eb:4a:86:f7:83:
b3:78:85:86:9d:c0:ff:33:3e:df:31:4b:75:ad:ff:66:19:4c:
70:55:2d:1e:d8:5e:36:85:3a:43:e9:ce:cb:36:f7:d6:41:60:
60:97:65:32:d9:fe:10:fb:88:65:5e:9c:01:0a:6f:47:58:45:
ee:10:4e:3b:b9:db:54:f4:98:10:ff:c4:2e:0f:74:02:8a:16:
be:7b:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:31 2025 by rpki-client