Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: Opj1/fAFfnBBOItwauCFLdwZaGfX9oAm8BsgL5KrmEQ=
Subject key identifier: 8C:13:6E:72:D0:61:28:55:1B:6F:DE:C5:73:B8:70:CA:3D:C5:5F:08
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 0198A0F176A21EDF3C093532DF3DB0EA0938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 162C
Signing time: Wed 13 Aug 2025 01:00:35 +0000
Manifest this update: Wed 13 Aug 2025 01:00:35 +0000
Manifest next update: Thu 14 Aug 2025 01:00:35 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: pz+FxVjtIkmyYlpyO2NukLwsG14ZI7QgXA66Z7Qu8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:76:a2:1e:df:3c:09:35:32:df:3d:b0:ea:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Aug 13 01:00:35 2025 GMT
Not After : Aug 14 01:00:35 2025 GMT
Subject: CN=8c136e72d06128551b6fdec573b870ca3dc55f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:17:19:a5:69:ab:f0:94:d5:ab:3d:9e:c3:
bd:5d:32:de:e5:6d:81:75:16:41:ee:d7:14:32:4e:
f8:a9:1b:c6:5d:ed:5d:7a:76:b3:9d:0b:e1:d5:5f:
25:19:32:ef:09:6a:14:f3:49:6e:ae:97:8c:bf:48:
3d:bf:a6:b1:13:f1:a3:0f:31:3f:72:fd:3b:91:a9:
53:73:ed:63:c9:86:82:9e:f9:ba:2f:73:64:f2:e8:
36:b7:49:45:b3:e9:46:d1:c3:54:91:d9:31:3a:f0:
b6:2e:81:9c:a2:43:f9:43:56:3a:79:ec:fa:cd:bd:
08:21:af:b3:1c:80:bc:18:38:55:72:b3:5a:2b:c3:
7c:d4:24:ee:90:44:62:87:e3:76:b0:c5:c8:0b:b8:
fb:58:2d:9f:53:f3:5f:f6:cc:80:6e:8c:25:f0:a7:
51:d6:3d:98:08:55:b2:d1:7d:0f:57:fe:c3:29:06:
0c:7e:7d:2b:23:e8:e1:12:55:da:e5:3d:ee:82:ca:
b0:08:3f:82:b5:09:ab:79:a8:59:b1:67:79:68:d1:
0d:94:d7:ae:a3:80:53:25:2d:23:f3:ed:88:12:ca:
bd:fa:37:88:c2:a3:65:88:39:dc:c8:61:b0:8a:fa:
47:54:e6:22:eb:78:3d:56:e8:e5:f3:84:f5:04:f9:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:6E:72:D0:61:28:55:1B:6F:DE:C5:73:B8:70:CA:3D:C5:5F:08
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8c:63:d9:d9:72:00:7d:8d:27:24:20:0a:c7:6f:54:06:e3:
43:a6:8b:60:b6:85:67:3e:d8:76:41:6c:cb:53:b0:db:e3:42:
60:7e:79:b9:61:ec:82:30:32:5a:70:79:9e:81:c9:7c:76:ca:
47:65:9f:e6:8a:f9:60:c6:0e:53:23:b6:08:2c:55:50:51:12:
2a:07:af:51:ae:16:30:05:3a:c9:a7:fd:23:5b:5a:db:00:21:
50:c4:34:00:cf:dc:63:db:a6:7b:1b:2b:7f:56:db:da:0f:03:
97:86:f7:86:ad:41:8c:22:ab:a5:d4:1a:2f:73:5e:2c:91:f0:
22:db:d0:38:1c:96:74:1f:22:6d:ac:f7:bd:34:27:c2:0a:02:
77:52:93:bd:57:b6:2b:08:0c:26:84:08:65:b0:23:f6:14:4d:
99:a9:54:d7:54:6d:6a:fa:d8:a9:e2:2c:8f:5d:61:27:20:65:
6a:64:b2:e7:94:f5:b4:f7:5f:60:13:09:f3:dc:41:a8:ef:38:
13:ba:0f:40:45:78:ff:0d:11:d2:59:1c:74:30:3c:72:6b:69:
8f:b6:f1:8c:cf:e0:30:f7:6d:b2:60:bd:c9:1d:84:a1:48:e0:
2b:a4:0d:aa:37:a0:8c:64:0c:c4:cb:00:62:c9:a8:d5:30:a1:
04:31:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:44:52 2025 by rpki-client