Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: 4qrOWy6fmSqVtFBG8HnfAcS/JBZ8RTHGL895bAqs9sQ=
Subject key identifier: 0E:2D:AD:C7:A7:20:9A:D3:87:A9:C5:89:7C:A5:CC:E0:DE:A8:4B:BA
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 01987E2ED53F2DA95BA49712AEC1CA5AB794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 099B
Signing time: Wed 06 Aug 2025 07:00:55 +0000
Manifest this update: Wed 06 Aug 2025 07:00:55 +0000
Manifest next update: Thu 07 Aug 2025 07:00:55 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: 85YfIh13zwJcmz8jiuE5DcbIAmBE565O5omffvUKvoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d5:3f:2d:a9:5b:a4:97:12:ae:c1:ca:5a:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Aug 6 07:00:55 2025 GMT
Not After : Aug 7 07:00:55 2025 GMT
Subject: CN=0e2dadc7a7209ad387a9c5897ca5cce0dea84bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:41:c7:b7:dc:6b:8d:5e:82:a1:16:86:bf:
66:e3:92:46:42:e7:17:ff:8a:95:b8:55:81:3f:80:
83:0a:ca:72:99:3c:2b:14:0e:49:62:96:f7:7c:13:
b5:07:ef:97:b8:8d:a0:5c:fb:c7:c4:86:de:28:2a:
0c:1c:1c:a5:bb:81:99:8f:1c:26:e1:e6:97:fc:0c:
92:eb:cb:1e:bf:d6:06:78:c2:9c:ad:70:80:7b:45:
4f:50:51:6a:cf:99:ae:3b:49:97:36:77:cc:e9:4b:
12:bf:2d:5a:3e:d0:3c:48:0a:20:cf:89:3a:0f:77:
0d:74:b4:be:8f:49:db:e9:65:a3:5d:ef:c6:b7:07:
86:5d:5a:a9:92:8f:35:93:f4:f3:3b:6c:db:77:09:
5f:de:31:ac:13:53:ca:3b:f8:d8:6b:c8:19:e6:07:
6b:72:6b:44:87:07:75:fa:61:ec:aa:45:c2:0c:ae:
b8:37:53:e0:75:73:72:9b:32:1e:df:2d:50:9d:d6:
5a:6a:a9:e5:0c:e0:b4:d8:b5:74:05:64:23:76:5e:
c3:fb:61:db:0f:5a:8f:bf:d5:08:8d:99:b9:90:bd:
0e:d3:77:f7:bd:6e:53:fd:69:5c:17:d5:54:de:9f:
bd:72:26:6e:5f:af:73:43:c7:81:bc:b8:77:9a:41:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2D:AD:C7:A7:20:9A:D3:87:A9:C5:89:7C:A5:CC:E0:DE:A8:4B:BA
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6a:80:9f:e6:11:a3:e4:ea:d6:5e:d2:3e:1c:ea:45:29:d4:
ec:17:15:58:9b:39:fa:dd:af:7b:d9:7c:f8:2b:87:e3:f6:30:
9c:eb:4b:19:cb:3c:83:f8:37:d4:f8:96:72:38:dc:25:bb:1d:
90:f5:87:d9:3a:cb:ed:08:35:14:ae:38:e7:f8:db:83:51:c9:
d7:fd:62:d2:ca:ab:fc:70:9e:50:29:86:43:d9:6e:0f:5e:97:
97:a9:1e:5d:be:9f:aa:21:6a:08:59:dd:a0:cf:54:9f:2e:b3:
a9:fe:30:ce:b2:ef:6b:09:6d:c4:67:d0:70:18:46:20:06:b0:
e6:1a:ad:5e:80:71:a4:13:5c:7e:e1:ec:68:cb:d9:85:7d:5e:
27:56:1f:92:a7:33:d3:ba:c0:60:fa:71:95:da:50:04:f3:c6:
21:80:6c:46:ab:58:38:41:11:a5:b7:30:2a:f1:31:2e:00:83:
28:cc:3f:30:b0:bf:42:cd:4e:4e:f6:7a:aa:c9:25:2c:50:70:
cd:ba:61:73:57:dc:9d:52:f6:34:40:38:04:b1:6d:c7:ca:c3:
d2:f0:3e:6b:f4:b8:97:8c:00:80:f1:1a:61:c1:84:ff:a7:58:
9d:1b:32:66:c3:52:1a:91:75:4e:58:2b:44:0e:09:9e:8a:b5:
1f:4b:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:03 2025 by rpki-client