Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: hcS4u7clnaXv0yh7hivuVJyXvQzagdoGOshif5HuXjU=
Subject key identifier: DA:97:02:CD:8C:37:1D:75:12:F4:9A:AB:4D:07:92:D7:59:02:53:D7
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0198A0F15FE71BE8C478A22FD834CA3EC67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 162B
Signing time: Wed 13 Aug 2025 01:00:29 +0000
Manifest this update: Wed 13 Aug 2025 01:00:29 +0000
Manifest next update: Thu 14 Aug 2025 01:00:29 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: ALtDTj7KV0GhIeYKzgu0JMIk3cX8USUeLp2u+iDw56I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:5f:e7:1b:e8:c4:78:a2:2f:d8:34:ca:3e:c6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Aug 13 01:00:29 2025 GMT
Not After : Aug 14 01:00:29 2025 GMT
Subject: CN=da9702cd8c371d7512f49aab4d0792d7590253d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:01:5d:ce:3a:ee:a2:76:83:aa:72:16:b2:
18:a2:35:db:ef:22:11:2a:cd:b3:c0:30:30:96:12:
5a:49:45:7d:90:14:22:f9:18:92:51:b6:7f:cf:08:
1c:e5:c8:01:85:7d:37:1e:11:a6:df:37:36:f2:0e:
4f:b8:20:30:af:e8:82:4d:70:4f:8b:e3:b6:2f:09:
c5:b4:f5:ba:5f:be:f7:6a:4b:a5:2a:99:5c:15:6d:
bc:c8:ce:70:bc:d1:17:09:7f:bc:33:88:a9:9b:48:
20:07:3b:9a:4f:29:ac:60:03:74:ba:7c:71:84:74:
8e:6e:ce:0a:fe:34:19:58:91:37:de:e0:25:85:78:
27:35:e0:95:11:2a:60:34:1c:e4:0e:d0:05:92:70:
a5:a0:88:5f:10:9b:fe:cc:09:af:8f:c6:0d:17:e8:
9f:32:db:9d:3d:6a:e9:69:01:4a:53:12:61:55:f6:
37:a7:b5:58:15:db:d7:3e:20:a2:0a:c7:33:9c:a7:
3f:c3:36:2c:9b:b4:dd:91:8c:65:00:b3:4a:07:fa:
94:14:18:71:63:37:00:ed:e9:e2:8f:ac:ea:c6:1a:
05:5b:cc:25:d1:c1:40:5e:67:e7:57:00:88:48:54:
60:e8:87:c2:f3:4a:b6:f7:14:5f:be:de:60:2b:4e:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:02:CD:8C:37:1D:75:12:F4:9A:AB:4D:07:92:D7:59:02:53:D7
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:6c:6e:20:2b:b3:7c:4c:4b:ad:0d:43:88:04:5e:ec:cb:
50:c4:f7:fd:e6:e4:68:f2:ec:9c:dc:78:a3:65:9e:f7:95:da:
c2:f7:c2:99:62:41:e3:29:b8:e4:9c:58:44:b0:4c:b2:bb:86:
a9:4d:a4:76:79:4d:d1:1e:55:c6:08:94:74:47:2f:66:f3:ba:
32:69:28:64:ae:88:02:29:d9:d7:e2:3f:2a:e3:7c:2d:45:90:
6d:c3:a6:af:5e:16:c6:13:ee:d7:fd:55:e5:97:0e:14:2a:fe:
d2:72:e0:cb:cc:f4:41:bc:f5:25:35:91:ad:8c:40:bc:5b:f6:
b4:e3:6c:ab:27:f0:0c:d8:a6:d0:1c:7e:2b:b3:0c:13:9f:09:
0e:e1:3c:4b:c6:fd:a2:66:f7:9e:6f:84:3e:5e:96:c8:c6:bf:
c1:6c:24:f2:89:4c:0c:6b:98:5c:f6:39:db:6f:af:a8:8e:9c:
8a:c7:31:d4:cf:31:7d:c4:29:e4:39:73:f6:6d:fe:8d:8e:03:
c0:a4:30:7e:c0:a4:26:d0:d0:d2:7a:c7:d7:4d:5c:6b:72:38:
6e:7c:23:f3:0b:d2:8b:95:b9:96:9c:a5:f7:d1:92:da:37:3e:
c4:1e:11:40:65:b6:8c:af:2e:2e:0e:2d:c6:42:6b:ce:8b:dd:
6e:b5:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:40 2025 by rpki-client