Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: q0MxctrWgvQVBd3A8J11O35/52hcgqw+GmpJc17uFjA=
Subject key identifier: 59:2B:6F:FF:B5:EF:C7:B9:0A:60:9B:4B:7A:4E:3C:CA:E9:27:AF:7A
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019846640CA6D7C90AAD1C47E395BE5FD20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 158E
Signing time: Sat 26 Jul 2025 11:00:18 +0000
Manifest this update: Sat 26 Jul 2025 11:00:18 +0000
Manifest next update: Sun 27 Jul 2025 11:00:18 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: rsDF2lXUqIOGasLW89eFeeNGJqYthSmrQJoAMWqZvMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:0c:a6:d7:c9:0a:ad:1c:47:e3:95:be:5f:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Jul 26 11:00:18 2025 GMT
Not After : Jul 27 11:00:18 2025 GMT
Subject: CN=592b6fffb5efc7b90a609b4b7a4e3ccae927af7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:37:c9:01:89:c4:87:c1:3e:0e:93:59:a0:
e8:32:95:7d:09:a4:f0:b6:fb:91:e2:0c:ec:f8:39:
5d:49:29:29:7b:e7:5b:83:b5:64:d3:b6:04:2a:a0:
f6:59:66:af:37:1f:88:26:0a:40:77:c4:16:fb:1e:
06:f9:93:3a:1e:36:46:90:1a:37:d5:61:b3:72:f3:
d7:3b:68:ec:ee:85:04:1a:03:fe:2d:ab:e9:be:b0:
5b:88:b2:a1:4a:32:21:95:d0:63:cc:15:ac:6f:81:
ae:26:1e:4a:f0:2a:22:fa:54:4b:19:03:2d:8a:8c:
e9:4b:d7:db:ed:dc:ba:f0:f7:96:e4:b8:86:fe:29:
32:8c:2d:07:74:b0:32:f9:1d:06:9e:09:7a:d6:c9:
c7:aa:50:db:7e:1b:0f:80:02:9e:05:b3:fa:97:4b:
bd:4b:c3:12:e4:c6:e8:b9:00:77:c3:f2:86:fd:9e:
40:38:7f:1a:54:6e:47:92:11:c7:71:df:e9:92:b9:
2a:c9:6b:96:8b:07:d3:87:ba:c1:44:55:0b:65:3e:
6c:0b:6b:15:ca:11:f7:b2:48:a7:c3:1a:7e:2e:88:
f1:09:22:75:51:74:64:49:e5:eb:1e:eb:14:d5:db:
d0:ed:a9:b9:f6:f8:4b:2a:e0:e3:33:11:16:e5:57:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:6F:FF:B5:EF:C7:B9:0A:60:9B:4B:7A:4E:3C:CA:E9:27:AF:7A
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:42:6d:9a:aa:77:8e:e1:f4:da:6d:e0:a1:a4:06:18:14:
4b:b3:17:ef:c3:9b:4a:69:c7:6a:f6:e7:84:25:16:1c:44:53:
d7:4b:20:27:c1:ae:ab:3b:58:c1:a8:33:68:24:75:60:79:4d:
1b:b5:f8:9a:a9:af:dc:76:15:17:68:39:47:cd:e9:4c:31:d2:
e5:1b:85:fc:b6:57:a6:ac:c1:ed:08:69:ad:20:52:87:e7:16:
2b:18:52:18:73:2c:a5:99:2d:70:36:a4:4f:fc:91:52:e0:6a:
da:6a:7c:07:88:66:b1:b3:7d:c5:f9:3d:2f:e6:b6:eb:1d:90:
5f:af:f0:d0:8b:d2:b8:e5:12:77:83:01:fe:e6:8d:db:f3:01:
67:ce:8f:74:13:6c:70:94:51:fa:40:11:06:ed:e7:0a:fa:d5:
88:d3:38:be:75:1e:e6:b5:73:ea:30:6b:e3:a9:35:7f:ed:29:
ed:49:82:ba:d3:91:0e:28:75:52:81:54:62:da:28:4e:a8:84:
b8:65:bd:91:98:f3:c9:64:85:4d:1d:69:ce:0a:38:fe:55:cb:
33:3c:ac:df:51:3c:75:15:c1:92:37:6f:f3:fa:3b:b2:5d:45:
08:7d:e8:97:9a:90:20:f7:be:29:84:35:15:8c:d9:59:78:bc:
9f:80:87:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:41 2025 by rpki-client