
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: Vr+6Hw+yGqJJ8m2qpaknDD0VG3BHOMQPG2LDelPXAYU=
Subject key identifier: E6:09:E2:4D:50:F7:62:46:9E:79:27:B0:5A:28:51:19:E4:03:36:05
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 019894B6B0F2A99AA00A59CB9CF31414C515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: 94
Signing time: Sun 10 Aug 2025 16:00:57 +0000
Manifest this update: Sun 10 Aug 2025 16:00:57 +0000
Manifest next update: Mon 11 Aug 2025 16:00:57 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: G95AU6G80afyqw6AyAiksh4xVH32wmEQgnpGXi6VV10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:b0:f2:a9:9a:a0:0a:59:cb:9c:f3:14:14:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Aug 10 16:00:57 2025 GMT
Not After : Aug 11 16:00:57 2025 GMT
Subject: CN=e609e24d50f762469e7927b05a285119e4033605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:d6:03:d7:3e:6e:b5:d3:91:32:5f:52:93:
83:ca:42:69:ca:ee:e7:bf:dc:c0:1d:25:ab:55:9d:
7b:b3:5a:a6:40:f4:41:2e:f8:e4:fa:f2:8d:7c:a2:
43:60:8d:47:f6:6f:cf:e3:91:8b:3d:0f:4f:94:ea:
0f:e7:0d:9a:9d:5b:b4:1d:35:a8:07:9c:f1:4b:b5:
bd:00:6a:dc:50:72:67:e4:4d:4b:6d:a2:b0:1b:b6:
93:85:3c:07:87:c7:fe:7e:10:0f:5b:6f:20:f8:26:
06:20:8d:30:fc:1a:9f:26:20:4d:75:8b:88:89:54:
f3:25:0f:95:25:34:00:4e:75:5f:2e:5b:b0:cf:2e:
9f:a2:89:b2:b9:1c:81:65:9e:3a:55:4c:01:32:d7:
40:57:1f:9d:4b:f2:68:3d:38:99:e6:4b:47:46:d2:
5d:8a:97:38:82:3a:4e:f4:d7:db:cc:18:b7:15:10:
90:78:14:72:23:5b:c9:a2:41:bd:10:fd:47:35:47:
08:aa:4c:45:1c:f2:1d:f0:ca:02:88:b9:ea:75:ae:
a9:e9:96:8a:8c:4d:60:92:85:d3:9b:70:a2:03:dc:
5e:96:5d:53:df:e2:58:fa:0f:aa:d8:a6:5c:aa:c7:
c2:df:b8:3f:b4:79:ab:c1:03:d2:8f:24:79:3f:c9:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:E2:4D:50:F7:62:46:9E:79:27:B0:5A:28:51:19:E4:03:36:05
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:4b:9a:62:2d:11:7b:c8:20:f4:aa:95:c3:f4:3a:d0:5a:
00:73:51:a6:08:91:8a:19:35:83:74:0c:09:c7:03:cf:a9:35:
9b:52:36:4a:ca:41:11:88:7f:67:94:e1:c9:12:ae:d5:d4:e2:
56:36:3b:a4:4d:f3:81:6c:36:c8:ea:1c:84:4f:ee:65:f9:d9:
b3:1b:18:bf:f4:40:4d:7b:1c:b9:7f:1b:6a:08:b3:76:60:27:
31:1b:6b:68:38:46:06:14:4c:c9:d1:9b:6e:9e:04:e2:94:0e:
22:82:3a:5e:55:c3:48:d9:4e:bf:5d:32:4c:24:e8:f0:18:ff:
05:0e:7d:3a:dd:78:11:bf:3f:53:41:ad:64:53:16:73:1d:5f:
0d:d7:db:51:c5:3d:42:cb:5d:63:8a:67:20:03:22:df:db:be:
fe:74:7a:f5:28:92:eb:b6:be:9e:a1:b1:39:7a:8f:7d:f4:89:
3d:2b:d9:f0:fc:00:d9:38:b0:ea:6e:23:9b:83:c3:f2:cb:c7:
95:ed:eb:2e:7d:4e:b9:9b:d5:99:08:8f:98:70:06:fb:4a:9c:
7a:46:5e:89:c6:90:99:3b:c8:48:6b:76:cd:65:d6:ca:d9:11:
b4:d4:f3:8c:12:08:c2:e9:20:51:87:1e:d3:80:7a:16:c9:16:
c1:aa:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:01 2025 by rpki-client