Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: lgQserA0O5fpoJPkqRdMosgerBipjfGsIKAYXnKOFnU=
Subject key identifier: C3:8C:01:9F:B4:60:8A:34:8F:CC:FD:97:8C:9E:59:BC:8D:6C:69:17
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 01984A40C69073F04050CA3ECECB0F31C1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 0422
Signing time: Sun 27 Jul 2025 05:00:15 +0000
Manifest this update: Sun 27 Jul 2025 05:00:15 +0000
Manifest next update: Mon 28 Jul 2025 05:00:15 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: w0xTi8vqvzjT/2HShlaPSU35y8Xi9uM518+HpB97m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c6:90:73:f0:40:50:ca:3e:ce:cb:0f:31:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Jul 27 05:00:15 2025 GMT
Not After : Jul 28 05:00:15 2025 GMT
Subject: CN=c38c019fb4608a348fccfd978c9e59bc8d6c6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:2c:9c:77:bc:4c:3e:cd:50:db:b0:6c:40:
4e:7d:f5:8f:e9:17:cd:2c:d1:85:0f:bd:d4:88:20:
52:77:1c:a7:a4:84:3f:18:81:0c:ba:9d:36:23:04:
fb:fb:70:43:77:b6:12:f0:c1:b1:47:42:c9:eb:68:
42:92:37:f3:be:8f:e3:34:5a:aa:6c:2b:d7:24:00:
bc:64:07:65:55:6e:c6:9b:56:a0:b8:2c:05:6f:eb:
62:66:18:5c:2f:93:3b:e5:d1:e8:c5:93:9d:90:37:
af:1f:b0:1f:ad:d5:b5:cb:22:5b:11:a9:79:1e:56:
93:4f:3a:54:ba:8c:53:f1:ba:73:02:22:57:cf:63:
df:ab:02:ad:b6:09:e9:38:de:b9:7d:22:05:4f:33:
02:a7:30:13:58:a8:a2:51:a6:2f:58:db:54:77:fd:
e3:a5:49:80:0f:13:33:4b:8a:b8:b7:34:bd:17:1a:
ba:46:79:77:40:3d:ec:2d:f1:82:b1:a7:63:f9:71:
f2:74:27:da:2a:bf:78:c7:27:72:d6:91:82:3a:9a:
ef:3f:1f:53:0b:57:43:4e:6d:43:bb:8f:ea:30:5a:
a7:f0:bc:c4:36:ec:7e:68:d6:bf:03:e2:d9:ce:81:
3b:df:f4:da:4e:98:b0:8e:86:f8:7c:ca:ad:2f:bd:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:01:9F:B4:60:8A:34:8F:CC:FD:97:8C:9E:59:BC:8D:6C:69:17
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:50:01:3f:e4:d7:dd:5e:c9:a3:09:da:5a:c7:81:21:b5:
eb:f0:c3:56:8a:83:f3:03:16:35:da:f9:89:59:cc:9e:94:d3:
03:12:70:16:1d:19:c8:08:95:a9:49:ca:94:e9:ad:1c:09:5a:
61:bf:04:72:7f:09:39:58:dd:51:5d:3f:d7:38:3d:00:9f:52:
59:b3:11:72:9b:e8:1e:02:ea:f1:d7:1c:10:4d:c4:d8:78:10:
1f:90:b7:ea:39:91:ca:b4:06:54:e0:ab:48:6c:98:fb:26:c8:
40:65:20:1d:d1:82:f7:b9:d1:a9:8d:a5:45:78:11:b9:7f:47:
9e:7d:07:3b:3e:25:59:c2:f0:53:e4:fe:76:73:77:7a:d0:36:
88:7a:32:9c:05:cf:47:8a:62:c6:8a:ad:e3:3b:65:cc:db:3a:
ad:2d:e2:ba:04:63:3b:77:ee:96:61:44:c9:9b:1e:1c:02:9e:
f5:c1:b9:1c:2b:b4:4b:d8:2c:09:e7:14:59:d1:53:dc:bd:65:
59:61:9a:82:15:f2:09:1c:f7:95:96:81:0a:d0:e3:b7:ee:99:
06:b8:2a:3a:b2:60:f6:85:56:5c:a5:8f:fd:d8:65:36:b0:3b:
94:13:50:61:a1:43:29:61:a4:f2:c8:fc:29:0a:98:57:6f:18:
06:3a:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:38 2025 by rpki-client