Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
File: EDJFGiYZdmtLC2LY8cMCkyblwWc.mft (raw, json)
Hash identifier: tnbzz/Y+OlYDdwL9wLH5A8dGMpwedd1kwNVccreSKYg=
Subject key identifier: A8:79:A6:2C:54:CD:60:30:13:98:A8:DC:D5:CC:7A:C4:74:23:F3:27
Authority key identifier: 10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
Certificate issuer: /CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Certificate serial: 0198432C09B288BFE0D1477EF1C184D6EB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
Manifest number: 0172
Signing time: Fri 25 Jul 2025 20:00:16 +0000
Manifest this update: Fri 25 Jul 2025 20:00:16 +0000
Manifest next update: Sat 26 Jul 2025 20:00:16 +0000
Files and hashes: 1: EDJFGiYZdmtLC2LY8cMCkyblwWc.crl (hash: aRbaZH//OdCqW8ypsJPc5AoeYosQDV77fmcW5FwGZ4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:09:b2:88:bf:e0:d1:47:7e:f1:c1:84:d6:eb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1032451a2619766b4b0b62d8f1c3029326e5c167
Validity
Not Before: Jul 25 20:00:16 2025 GMT
Not After : Jul 26 20:00:16 2025 GMT
Subject: CN=a879a62c54cd60301398a8dcd5cc7ac47423f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:59:3f:d6:9e:9f:f8:8d:6d:03:cc:2e:bf:
52:0f:4e:15:60:27:86:53:68:e2:1f:98:ad:b2:a5:
d0:84:d0:18:77:93:42:e3:12:08:47:ca:d3:c0:65:
b9:b6:5b:12:cd:df:01:90:31:c8:35:6d:fb:c6:1c:
a6:9f:fc:31:2b:1a:43:b9:22:24:74:b8:29:fa:62:
24:6a:63:cf:6f:ce:26:11:1f:1e:cd:e6:b5:fe:89:
51:9b:85:0b:95:28:7e:e5:40:68:43:ea:f9:e9:ba:
b3:0b:73:11:c6:05:ca:05:e1:d1:75:4d:da:d4:f2:
58:41:c6:99:b8:72:27:c3:d4:ff:e5:bb:90:81:d4:
9a:79:ee:45:bf:01:57:8f:68:a6:7f:7c:cb:5d:6a:
80:4d:08:d7:2f:81:19:8a:cf:65:be:26:f3:42:1c:
b7:a6:65:05:f0:14:72:d1:ff:d0:fe:3d:7f:05:3a:
63:dd:dc:0f:a9:e2:f5:96:1c:12:f9:cb:c8:d9:16:
3f:d0:75:98:c2:38:44:44:ef:e0:1e:8d:7b:1e:50:
b1:72:b6:bc:73:91:6e:ce:86:6c:2b:2c:58:bf:e7:
10:c0:b0:ae:ef:33:a6:1d:46:8f:99:57:39:ae:9c:
78:6b:01:69:75:00:17:2e:e5:e4:9e:70:09:7f:8c:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:A6:2C:54:CD:60:30:13:98:A8:DC:D5:CC:7A:C4:74:23:F3:27
X509v3 Authority Key Identifier:
keyid:10:32:45:1A:26:19:76:6B:4B:0B:62:D8:F1:C3:02:93:26:E5:C1:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDJFGiYZdmtLC2LY8cMCkyblwWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e45d8-f84e-47c6-bb43-79f099a9a09e/1/EDJFGiYZdmtLC2LY8cMCkyblwWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cf:37:bb:66:a4:1a:56:c0:0a:fb:38:b7:02:a0:9e:80:4a:
84:56:33:9c:66:c2:f9:8b:0b:f2:bc:ba:b7:69:4d:18:29:bb:
e2:28:c3:1a:b0:d8:fb:d9:e4:6a:8f:23:e7:2b:2e:90:aa:21:
66:cb:3f:e8:fc:cb:3e:af:bb:c4:07:c7:81:92:30:5a:0f:8a:
25:97:a3:eb:a0:4f:65:d2:19:db:11:b0:04:26:a5:7e:9c:0f:
71:ac:75:2e:c2:86:62:40:7b:e5:73:5a:a0:94:da:51:9e:0c:
b1:08:20:dd:52:4e:10:a2:6a:f6:c7:08:b8:9f:cf:21:09:2a:
94:c9:9b:86:b1:fc:47:cb:d5:eb:59:df:14:ee:b2:d2:c3:77:
43:fb:dd:7a:24:ae:1f:f6:a0:2c:1f:c7:09:7f:2a:44:62:c7:
e0:16:b5:c9:d2:dc:be:fc:38:9d:59:d5:78:c3:7b:a2:3b:65:
12:49:f9:a3:89:15:cf:6c:d6:92:56:55:09:0a:65:28:3e:3f:
1e:50:b5:79:e2:ad:be:96:a4:97:b0:b9:76:d0:d2:3f:db:e3:
55:ed:79:e2:15:7d:6f:b2:4e:c6:35:b5:74:b4:ef:1a:c8:d2:
0d:44:05:9b:53:b2:f2:aa:3e:4d:4d:69:d1:ce:b0:85:f9:f0:
86:74:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:06:10 2025 by rpki-client