Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: F0cAeFLqWdRb0Vx+FsKsvwVALtP7+E3THTApF8lJlK0=
Subject key identifier: E6:B4:A5:E0:42:26:0D:2A:86:95:6E:F5:4D:16:A3:2F:DC:CF:2A:58
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 0198A23D45708C8396A541074DEC34CF5A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 09B3
Signing time: Wed 13 Aug 2025 07:03:00 +0000
Manifest this update: Wed 13 Aug 2025 07:03:00 +0000
Manifest next update: Thu 14 Aug 2025 07:03:00 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: iBE4+qWgipU+2YjUSgespL0ALn168he7wwrutMaSojU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3d:45:70:8c:83:96:a5:41:07:4d:ec:34:cf:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Aug 13 07:03:00 2025 GMT
Not After : Aug 14 07:03:00 2025 GMT
Subject: CN=e6b4a5e042260d2a86956ef54d16a32fdccf2a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:b3:70:63:d6:5c:19:81:5e:9d:d1:9f:3d:
c4:06:3f:92:5a:74:50:d9:77:7d:09:3a:c0:d4:b9:
b3:bd:6e:a6:a1:15:b0:50:4f:2f:7c:31:14:7d:17:
c2:02:82:26:99:c8:2d:58:72:fd:a6:39:12:cb:80:
7a:70:16:94:78:bd:43:44:eb:f0:66:d2:a1:f7:64:
a2:85:91:3c:c3:bb:6e:3f:67:c3:66:5c:38:61:86:
e7:f7:71:ff:c5:b3:41:08:97:95:ca:c1:60:8e:f9:
08:ce:62:cd:9f:97:34:de:b0:45:d2:bf:12:25:a8:
bd:ee:58:ff:62:61:77:a4:f2:93:1e:7d:6f:0a:1b:
e5:27:0f:c2:2b:3c:36:05:28:f0:7a:3e:43:3e:a1:
0d:dd:9b:7f:1a:ab:ef:29:94:e5:fb:c5:74:51:33:
64:86:5b:e4:74:8b:bc:98:51:61:e5:13:0a:80:23:
e4:f4:b8:2f:3c:27:3b:dd:05:69:d9:5d:df:4d:6c:
7d:e0:17:00:28:d4:da:1f:78:23:66:9e:a8:87:cb:
b0:fa:ad:31:fa:03:1f:46:9f:31:f0:75:dd:ad:b5:
11:ac:2c:0d:e1:d6:76:54:1f:87:ad:72:95:f5:a1:
81:3b:f0:0c:34:3c:50:f9:98:c9:41:24:bd:bd:07:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B4:A5:E0:42:26:0D:2A:86:95:6E:F5:4D:16:A3:2F:DC:CF:2A:58
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:47:18:67:38:02:c0:d9:fb:0a:67:72:e9:e9:76:c9:be:
ed:78:f2:7d:b4:83:49:56:67:5b:97:5e:e1:7f:06:3b:bc:ca:
4e:2f:17:30:06:4d:e4:b4:d8:c1:e9:27:33:85:7e:1d:6f:81:
a6:ab:5c:fc:a1:a4:44:39:d9:5d:52:87:dd:db:1d:cc:f6:98:
cd:a8:07:3f:c3:30:94:a6:06:b5:51:50:4b:66:4e:c3:44:4f:
09:5f:e7:17:3c:ad:c5:26:1f:ee:69:80:32:f9:54:17:7c:43:
48:3f:eb:ca:59:25:a0:51:e3:d5:1f:46:eb:05:1f:e8:2b:55:
7b:0b:67:2b:01:cb:3c:a9:03:df:25:96:ec:4c:6b:8a:60:20:
77:6b:70:dd:e4:25:c9:14:6f:8d:d0:e4:e2:0c:5c:50:61:60:
7c:f1:3e:46:0b:90:7f:c1:cb:8b:dc:65:b6:d2:a0:c4:fa:0b:
de:b8:0d:94:bb:4f:85:e1:21:26:ae:c8:23:f1:ba:ad:20:3a:
66:aa:27:4d:e6:e7:ab:b6:64:db:09:84:52:27:ec:2d:34:83:
dd:02:e0:02:16:28:66:4c:ac:08:be:88:a6:2a:0c:32:46:53:
63:f0:08:a6:9e:d5:f0:d8:91:04:d3:e3:00:5b:fa:3d:e8:c3:
80:f1:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:21 2025 by rpki-client