Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
File: eJwCNiZh7UHo-Xohsan6yuU96P4.mft (raw, json)
Hash identifier: zyILaWhBiZYb4dRhWDsFtWiPZAoeASMjz09zRxaOmgI=
Subject key identifier: 64:CA:53:70:CE:BB:03:C6:6F:37:3B:D4:59:F7:98:56:B7:43:B6:31
Authority key identifier: 78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
Certificate issuer: /CN=789c02362661ed41e8f97a21b1a9facae53de8fe
Certificate serial: 01989E954ACDAE78BF777E6110CBF25269BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
Manifest number: 03A4
Signing time: Tue 12 Aug 2025 14:00:40 +0000
Manifest this update: Tue 12 Aug 2025 14:00:40 +0000
Manifest next update: Wed 13 Aug 2025 14:00:40 +0000
Files and hashes: 1: eJwCNiZh7UHo-Xohsan6yuU96P4.crl (hash: nsLMwA2//6cCboHCBYKjF/NrDYKQWOxK/O4uksPVBAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:4a:cd:ae:78:bf:77:7e:61:10:cb:f2:52:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=789c02362661ed41e8f97a21b1a9facae53de8fe
Validity
Not Before: Aug 12 14:00:40 2025 GMT
Not After : Aug 13 14:00:40 2025 GMT
Subject: CN=64ca5370cebb03c66f373bd459f79856b743b631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:07:f2:4b:f7:9b:db:ca:8f:20:4d:f6:b9:
2f:29:ea:bb:06:f2:6a:dc:a9:77:88:8c:e2:85:ee:
c3:5b:dd:c7:cc:65:c4:8c:65:ff:19:72:33:d9:b3:
0f:27:15:3a:4a:bc:5d:f2:fb:45:55:88:f7:43:f5:
e2:3f:1b:fd:0b:46:ae:99:c6:b1:42:3c:6a:3a:86:
5b:8b:be:8f:46:bf:50:c9:e7:6a:6c:96:8f:e3:99:
03:f0:1c:e8:db:81:11:2a:c0:d0:52:d2:68:9b:3a:
d9:f8:63:43:00:62:65:1b:9b:45:0d:54:52:cb:39:
41:dd:c7:d3:fa:8b:b3:02:12:45:59:6b:67:68:43:
50:ee:29:db:03:36:41:ba:c2:24:2c:1d:2b:48:87:
1f:69:8b:10:c3:1a:54:5d:e4:45:96:ad:d9:d6:7e:
5b:92:a4:8f:3b:6e:ed:3e:2a:b2:16:08:78:0b:79:
b3:f7:c8:19:23:47:80:2c:7b:28:8f:8e:98:91:fb:
ef:fe:9d:4b:d9:c2:3b:b1:88:a6:d5:0a:35:44:56:
be:c2:b9:6a:c8:66:53:2c:0e:40:c2:97:5c:b0:18:
33:9d:9e:8a:1c:16:b7:43:5c:70:58:c2:71:56:c2:
2a:dc:74:b2:72:11:67:dc:6e:28:d3:be:88:c7:36:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CA:53:70:CE:BB:03:C6:6F:37:3B:D4:59:F7:98:56:B7:43:B6:31
X509v3 Authority Key Identifier:
keyid:78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fd:da:76:08:5a:8a:e7:c1:4a:91:f4:b8:e5:aa:4a:0f:c3:
aa:4c:0d:bc:be:31:3b:e8:d8:72:7b:b9:c4:aa:20:86:7f:f3:
b3:50:16:a8:ac:05:c9:61:b2:07:b0:38:8e:61:55:f3:c0:d6:
c3:f4:6b:2a:1f:1c:70:aa:06:cd:24:65:da:57:6a:cb:e5:9a:
22:70:9f:66:2f:ed:73:77:07:7c:00:52:ea:d3:84:22:b3:c1:
40:5e:8e:4d:5c:98:d0:59:d0:9a:c0:fc:35:8d:6b:28:6c:7a:
66:81:89:4c:30:e1:a9:b8:3a:99:82:28:e7:90:eb:f8:df:9c:
0d:25:51:20:bb:aa:f5:b1:aa:98:62:a6:0d:f7:1f:d1:25:77:
7e:5d:c2:8d:a7:83:75:52:4c:3e:1f:5e:b8:be:f7:ef:2a:7b:
e8:b3:c4:1b:e0:7e:f8:b5:40:59:82:96:27:c8:f8:f2:79:d4:
d3:c0:a0:d5:00:d9:57:9e:09:84:58:e5:9e:e7:19:6b:26:69:
95:30:57:d6:4a:90:7e:a6:16:1b:03:ff:f1:37:ef:72:23:a6:
70:76:37:de:93:39:5e:31:ad:a3:2e:21:3d:f1:90:95:5b:96:
a9:37:cc:5f:a5:31:1a:e5:e6:12:31:6f:24:b8:12:29:44:25:
26:4e:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:22 2025 by rpki-client