Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: IlkZCWCAUPwKeKNSHmY7n1OT1l2Z9ymEaSUe3Pkl2Dw=
Subject key identifier: 8E:42:A2:0A:B0:1D:E7:26:B8:55:8D:65:84:86:52:94:D7:10:06:8B
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 01989F03079CAE61B33EAEA0EE379533B018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1627
Signing time: Tue 12 Aug 2025 16:00:32 +0000
Manifest this update: Tue 12 Aug 2025 16:00:32 +0000
Manifest next update: Wed 13 Aug 2025 16:00:32 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: aUgWbPNA8eKTlatsYLHkIrtYrRO33/+9zfdh318Hk7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:07:9c:ae:61:b3:3e:ae:a0:ee:37:95:33:b0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Aug 12 16:00:32 2025 GMT
Not After : Aug 13 16:00:32 2025 GMT
Subject: CN=8e42a20ab01de726b8558d6584865294d710068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:c6:80:5a:4a:c0:28:d3:8f:ef:0c:62:4f:
40:67:92:35:03:04:ff:c0:ae:20:2d:b0:e7:f3:89:
f3:ff:f6:7e:1d:3f:51:5a:d0:bb:25:59:c9:7e:0c:
e3:9f:51:da:68:04:14:8e:78:0a:62:ab:95:28:2c:
8f:2f:3c:33:5e:8e:f5:f1:6f:1f:a5:17:86:b3:c2:
b8:22:aa:a5:44:cf:fd:2c:b9:22:f0:77:e1:7a:61:
e2:a8:c3:04:43:a3:26:16:25:91:66:fa:81:65:3c:
1f:26:04:5e:ec:67:74:2d:b1:16:b4:06:74:af:41:
eb:db:b5:ca:04:52:14:36:19:74:50:de:c1:cb:19:
83:85:bf:74:68:94:55:d4:b5:f4:bd:6b:88:73:77:
44:46:c0:12:96:78:61:c5:68:eb:1e:2f:a4:1a:b7:
b9:b3:50:d1:3b:95:d0:29:99:b8:f4:5f:4d:9f:52:
74:59:05:23:2e:a3:e8:b0:65:5c:29:a9:86:a5:57:
3c:67:db:c6:ae:ea:bb:46:ce:fd:6f:32:fa:1e:cb:
8e:7a:14:e5:bc:07:35:da:2d:f5:cc:3d:2b:17:e2:
52:ad:6a:0f:e9:36:09:eb:5e:75:22:83:91:3c:a3:
53:e8:ce:4b:01:61:4d:19:5c:00:1a:c7:d4:37:7a:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:A2:0A:B0:1D:E7:26:B8:55:8D:65:84:86:52:94:D7:10:06:8B
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:c5:92:72:da:59:0a:f0:47:a6:b6:09:d1:be:d8:72:c2:
b0:0b:9a:46:18:c3:75:28:fb:10:f5:f6:c9:c3:df:9b:1a:c6:
28:2b:1e:ca:3a:9f:9e:5c:ff:ba:d6:b2:bf:b6:e0:c4:98:01:
0d:a1:be:64:03:cd:4e:30:53:9a:4d:5b:1e:be:4c:c5:a4:9f:
a4:d7:9b:a9:ff:b7:94:af:22:77:4a:f1:2d:1d:5a:2b:91:69:
b7:a0:c0:0b:3c:e9:08:45:23:c3:09:01:25:22:12:94:dc:84:
84:ad:ee:27:6b:19:ac:c5:6e:20:d2:e3:57:bb:ea:4b:6f:a7:
7c:9d:45:ff:f1:e3:ae:53:b0:2e:fd:f0:3c:57:86:a0:08:64:
89:4c:41:d7:0f:95:7d:3c:17:85:52:d9:0e:10:d9:ff:a8:04:
17:d4:ed:db:26:9f:78:ab:de:6f:ae:1f:84:ae:41:ed:4c:dc:
d1:28:f0:c4:95:dc:de:85:26:20:aa:75:61:7e:73:92:99:63:
26:e9:09:bf:a4:62:d7:ae:7a:ed:30:e7:80:2e:63:b4:e0:b6:
27:af:27:4d:f6:64:a5:64:72:5a:e4:42:53:92:4c:65:6d:bf:
74:4f:25:dc:c6:b5:6a:7f:72:a8:e9:cd:4e:63:06:ae:a4:8d:
42:33:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:19 2025 by rpki-client