
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
File: ehKIruzRFJyedF-YZT5okK-iU6s.mft (raw, json)
Hash identifier: AU+6gwBcrMnOR7dj313cWNGm1G/GS+nI8EjWnrgqycc=
Subject key identifier: 32:B6:44:E1:76:58:FC:D1:93:C6:41:66:02:A3:BD:E3:8A:0C:5C:C8
Authority key identifier: 7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB
Certificate issuer: /CN=7a1288aeecd1149c9e745f98653e6890afa253ab
Certificate serial: 01988F902942ECE1FC9DD8EA1D6BFFFD8679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
Manifest number: 0113
Signing time: Sat 09 Aug 2025 16:00:46 +0000
Manifest this update: Sat 09 Aug 2025 16:00:46 +0000
Manifest next update: Sun 10 Aug 2025 16:00:46 +0000
Files and hashes: 1: ehKIruzRFJyedF-YZT5okK-iU6s.crl (hash: KSh5mZnomYmErRCTvD/Tlf4fufcqEmczKZ4wuhzNxaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:29:42:ec:e1:fc:9d:d8:ea:1d:6b:ff:fd:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1288aeecd1149c9e745f98653e6890afa253ab
Validity
Not Before: Aug 9 16:00:46 2025 GMT
Not After : Aug 10 16:00:46 2025 GMT
Subject: CN=32b644e17658fcd193c6416602a3bde38a0c5cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:74:dc:7b:39:b6:cc:e4:7f:10:92:cb:7e:
7b:39:36:27:d7:f3:75:77:26:4f:81:fe:7f:3b:3a:
31:4d:b2:93:b0:12:5e:3b:fd:5c:b4:c4:f4:e0:9a:
3e:88:e1:ce:43:ac:6b:4a:78:f4:c8:0f:65:f0:6c:
1e:5c:ac:da:d7:6a:d2:d9:14:74:bd:54:ef:87:eb:
b6:22:bc:89:a2:54:e9:1f:bb:de:07:8c:99:1f:c0:
e1:d9:b5:3c:89:85:84:b1:1c:82:7d:16:73:98:44:
3f:3e:99:22:af:3f:1a:32:85:37:c6:fb:0d:2e:40:
6d:aa:21:0b:31:1f:00:5d:12:3f:8f:bc:cb:63:cf:
04:3f:96:15:af:29:30:4e:ae:44:ad:c9:e1:cf:66:
76:6c:65:b8:2c:3d:05:4b:b3:e3:ab:db:e9:74:7c:
b0:89:3a:10:5b:11:b6:dc:0b:01:f9:8d:29:bf:2e:
8b:00:47:a2:36:b6:d3:43:f7:0e:78:ba:f9:d9:70:
ce:05:84:12:93:9a:9e:21:1a:39:a6:93:a5:71:ce:
2c:07:a6:cc:5d:dd:67:96:ea:03:76:45:60:bf:70:
5d:b9:cd:a2:44:4b:fa:f0:8d:bd:d1:ae:47:ad:f6:
3f:d7:05:81:e8:db:c3:9c:0d:e1:f8:c1:59:18:48:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:44:E1:76:58:FC:D1:93:C6:41:66:02:A3:BD:E3:8A:0C:5C:C8
X509v3 Authority Key Identifier:
keyid:7A:12:88:AE:EC:D1:14:9C:9E:74:5F:98:65:3E:68:90:AF:A2:53:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehKIruzRFJyedF-YZT5okK-iU6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b4f3d0-b1d1-46be-a190-8e2027695d07/1/ehKIruzRFJyedF-YZT5okK-iU6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:3f:e0:cc:36:a5:f6:48:73:11:14:d8:76:03:bc:af:81:
a7:d2:81:9a:7d:f3:b2:e5:87:b7:8e:e5:e8:32:75:4f:82:8f:
51:0e:48:21:7c:2a:6a:0e:7b:bc:5b:84:91:c0:12:43:f8:30:
95:8c:4c:10:08:ff:3d:96:93:9f:f5:61:90:8b:b5:e7:34:61:
37:b6:76:c9:76:16:ee:de:0f:b9:1e:be:d7:b2:87:ea:9f:5f:
f3:a6:13:78:b1:5e:39:a5:66:06:cd:a5:d5:52:8a:df:fc:e0:
61:a5:3b:75:c5:01:c6:cf:3f:cb:c2:17:50:58:36:48:e5:9d:
ea:75:82:8c:87:13:a2:38:85:c6:b1:09:56:1c:70:7b:d5:84:
0d:a9:d9:b4:90:1a:81:ec:32:0f:2e:28:da:83:e0:1b:ad:55:
b3:33:f7:89:d1:d3:cf:bb:40:fd:12:34:7d:31:bd:45:89:d3:
d9:09:5c:5b:5c:6e:61:d8:c1:3e:4a:0c:85:c2:10:7f:46:95:
05:e9:e1:a8:7a:ba:98:7e:40:fc:15:26:cb:27:6d:e8:7c:60:
1a:78:d0:df:52:62:6d:04:73:02:3b:db:23:0b:2c:02:7d:e5:
26:e1:3e:b8:6b:b5:a0:e2:c1:3f:c7:b7:21:f4:03:b0:84:57:
26:d3:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:46 2025 by rpki-client