Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File: e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier: 9f6Vw1KtoPXLVFlpmz2llGUXFmAfCVaXIuK4J3oUysk=
Subject key identifier: F3:92:62:5E:36:3E:1F:57:D5:C1:01:B9:63:CA:F1:A8:41:E1:9E:5D
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer: /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial: 01984964FCC2C64C5C66F718F44499442759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number: 0CD1
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: 4cEDY+456l0/rsj02yMk/B37U+Zcpd8NglReBOBNlQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fc:c2:c6:4c:5c:66:f7:18:f4:44:99:44:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=f392625e363e1f57d5c101b963caf1a841e19e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:d9:a2:6a:ba:2b:67:a1:3d:e1:5e:45:c4:
3b:17:12:8b:6e:a1:76:c6:a9:64:f8:6a:94:09:b7:
98:bf:39:78:5b:40:83:ce:04:5d:57:77:7e:4a:36:
72:8f:0e:72:b9:4a:99:70:15:fc:ac:1f:09:84:cb:
41:33:e2:4e:d0:c7:86:39:9d:77:c9:5c:91:da:03:
af:2b:34:3c:01:a5:23:8b:97:c4:59:69:37:3f:77:
0e:54:7b:c4:d6:4d:74:5c:5c:15:0c:73:41:5f:41:
e4:ab:d7:c0:cf:00:56:2b:76:79:32:f7:11:21:1b:
ea:30:9b:7a:90:06:86:1e:47:39:3b:4e:96:4f:9e:
22:9c:2d:2f:97:31:a6:83:8d:ac:93:4c:e9:fa:6e:
7b:a3:7c:0d:ab:e1:e5:00:0f:5c:99:d4:06:35:17:
c5:a5:fd:03:ae:7d:76:91:96:19:f0:3a:31:07:2f:
fc:aa:88:0b:e3:a1:5a:f4:e6:37:d0:c6:85:25:d0:
82:58:71:9a:59:86:83:61:80:23:db:eb:a9:87:03:
f2:88:e3:e5:97:f7:cd:21:ad:ce:cd:ad:8b:4a:e7:
d9:d3:d3:d6:40:d7:1e:07:e5:bd:ec:2c:c9:20:e7:
29:4e:bc:aa:45:5b:75:37:02:f3:a9:ac:04:6b:6b:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:62:5E:36:3E:1F:57:D5:C1:01:B9:63:CA:F1:A8:41:E1:9E:5D
X509v3 Authority Key Identifier:
keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:e1:96:9e:17:83:55:63:2a:57:ee:68:1e:b4:a2:cf:37:
65:c6:d1:32:4e:c5:b1:8d:ec:83:f0:e5:97:a0:6a:c2:f4:9e:
73:a4:e9:16:b1:eb:8f:94:40:bd:e0:72:d4:64:db:6a:1b:91:
44:12:e2:c9:89:79:6b:6b:9a:00:77:79:55:4d:06:20:2d:a3:
19:07:d1:c8:9e:64:ca:5f:5e:33:74:8c:74:79:b2:d3:9f:5f:
a7:fe:59:89:17:50:c3:a7:32:a2:8a:e5:b9:5d:08:2c:93:6f:
21:be:76:07:69:f2:57:4a:74:63:a9:da:c3:ef:8a:a0:14:a3:
c4:f1:c6:76:af:d4:44:e8:64:15:e6:65:ce:93:77:53:ac:4f:
7f:e3:13:d9:66:79:b9:b0:02:01:c9:0f:9c:ad:14:70:94:7d:
bd:ed:ed:58:92:ff:fc:6a:de:f6:88:3a:02:6f:29:e9:75:e9:
da:a5:97:4f:08:0e:8e:08:e6:79:9b:ee:a7:a0:f8:e1:97:f0:
06:72:3c:08:36:97:aa:b8:bb:03:c1:89:cb:3a:55:e9:0a:e6:
95:44:e3:09:9f:8c:17:8e:31:d2:fe:9c:dd:ff:6c:d4:91:7d:
af:df:1a:0a:84:4b:6d:d2:63:ae:cd:8a:15:d5:33:1e:3b:4e:
8f:8c:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:57 2025 by rpki-client