Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: dM337bit31Ap2RenVjzjXu+8cWaDTV1qMtJfWXNXyPc=
Subject key identifier: 3B:CA:60:7E:CB:07:B2:B2:71:6F:56:F4:0D:F5:5C:F8:C7:9C:67:2E
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 01987F0A67BC16C886811CF49E6651748023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: 7A
Signing time: Wed 06 Aug 2025 11:00:44 +0000
Manifest this update: Wed 06 Aug 2025 11:00:44 +0000
Manifest next update: Thu 07 Aug 2025 11:00:44 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: mFU5lKDa8V1JlCZSL80qmIm8iFA2NMnMlh6xA4PH40c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:67:bc:16:c8:86:81:1c:f4:9e:66:51:74:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: Aug 6 11:00:44 2025 GMT
Not After : Aug 7 11:00:44 2025 GMT
Subject: CN=3bca607ecb07b2b2716f56f40df55cf8c79c672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:6d:fc:92:4b:81:49:d3:38:83:ed:bd:15:
25:ef:2e:94:90:df:93:7b:e6:b7:b3:b8:83:c7:74:
6b:d8:e8:41:d5:13:46:5e:4a:9e:77:a8:f3:9f:af:
34:01:9b:cd:40:c7:cc:b5:da:83:30:fe:a3:de:90:
c7:8e:7b:57:4c:1d:2b:df:ed:20:ef:1f:79:3e:d2:
62:31:d6:69:94:dc:18:d1:1e:27:b8:7f:1f:7b:16:
7a:58:33:4b:c0:32:d8:70:61:d7:3e:69:57:48:47:
73:b7:1a:18:27:75:59:9a:a3:1a:24:5b:93:0a:ef:
3e:d6:fb:af:92:e1:ea:21:42:cc:91:01:40:53:c8:
17:73:6f:cc:31:d9:62:2c:42:da:99:45:5b:a5:a1:
73:ff:cd:98:7a:aa:a4:ab:8e:88:42:36:c3:ca:b0:
3c:03:6f:6d:69:82:e9:6d:4f:aa:a3:42:1e:49:a1:
57:fc:ad:02:62:ab:e3:ae:1a:ae:68:70:5e:a7:b9:
7b:e4:ba:57:32:99:36:2a:5d:02:da:df:f8:a8:57:
22:bd:b8:42:6d:db:24:e9:8c:06:a3:38:82:42:43:
a3:6d:b1:be:48:d3:40:fe:7d:f9:86:35:b7:7c:c3:
1b:1b:85:3d:9f:6a:d7:6f:1d:2b:4a:15:71:57:e0:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:60:7E:CB:07:B2:B2:71:6F:56:F4:0D:F5:5C:F8:C7:9C:67:2E
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:72:3c:7b:0c:e1:bb:dd:01:e0:6c:d5:b8:38:29:e4:df:
08:a8:eb:52:50:df:df:63:e8:4b:be:0e:57:f2:65:7b:ec:69:
58:99:c8:14:2b:e4:b7:ee:17:c4:8f:4c:b3:39:73:a2:ef:b1:
a3:17:2e:d9:48:80:8e:21:ea:d5:8c:42:43:b6:b1:9c:47:ab:
49:0d:67:4c:f8:b9:c9:0f:a9:ca:c9:de:2f:7a:a9:22:bd:38:
cb:26:90:f6:42:78:fd:8b:23:d5:93:5f:dd:4f:e0:eb:3e:16:
6a:e4:00:4e:b1:1b:37:9b:9d:ae:b1:d6:5c:09:f2:3b:6c:e9:
9b:ff:24:23:5b:bb:59:1f:cc:87:e6:64:9c:ad:91:68:d1:1e:
06:07:d7:5a:fc:14:9c:b8:54:93:d9:2b:eb:46:9c:f8:e4:b8:
3a:23:a1:94:1d:2b:5c:50:d9:6a:0e:ba:54:76:d8:52:47:9a:
b4:d7:c7:c4:68:a7:bf:21:90:b7:87:89:59:48:ca:ec:a5:2b:
51:80:09:dd:ca:e1:0b:e8:10:8e:65:2e:c7:c3:44:02:6d:ef:
8a:3c:35:33:00:58:50:07:37:f7:e3:81:53:96:b7:3e:59:c3:
78:43:92:72:db:d0:59:6f:e7:0a:28:da:52:ce:8d:b1:4e:48:
24:80:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:10:22 2025 by rpki-client