Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: 41gvzLCTlWCKnme+Lep5FRe1nLWQlrtDjISN+mZl5Xw=
Subject key identifier: 53:81:4A:F4:53:ED:97:C7:EF:23:E3:DC:DA:55:87:AF:B4:E3:30:BD
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 019848C0318C59CC7017AE5815DB81E49E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:11 +0000
Manifest this update: Sat 26 Jul 2025 22:00:11 +0000
Manifest next update: Sun 27 Jul 2025 22:00:11 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: n10FQzOTp5ylZdmXF0vr3AprvO732PYX6FN9C/Kd1Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:31:8c:59:cc:70:17:ae:58:15:db:81:e4:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Jul 26 22:00:11 2025 GMT
Not After : Jul 27 22:00:11 2025 GMT
Subject: CN=53814af453ed97c7ef23e3dcda5587afb4e330bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:df:bc:c2:a4:7a:3c:4d:e0:3f:52:5a:2c:
8d:34:0c:a6:e2:da:31:1e:4d:83:89:b0:72:58:4b:
ce:26:d8:24:32:83:e2:67:d8:c8:ef:4b:bd:ce:59:
43:65:f8:1f:9d:5b:18:87:22:8f:50:a1:fe:6a:ff:
63:a5:2a:c6:97:b2:d6:a6:32:51:f7:cd:f0:d1:ae:
9b:b6:e8:14:ec:c9:5c:67:f2:d1:1c:73:ec:33:5b:
68:79:d8:82:c6:5e:33:f0:52:68:6f:89:7b:93:de:
c2:67:2b:81:7c:a2:d3:ad:a6:31:4d:f3:81:89:51:
25:1d:d2:7c:97:bd:ce:1e:42:97:f0:a7:f0:c9:85:
cd:97:e2:33:d2:25:2e:17:85:4c:3b:b7:e0:34:49:
02:4a:48:14:f9:e5:6a:35:80:14:40:32:31:80:1d:
b8:2b:84:d8:77:25:bd:f5:74:7e:51:24:72:c4:dd:
a4:e9:cf:d2:ea:7b:20:f0:96:c8:61:bf:34:90:e4:
ab:3c:32:9d:d8:ac:fa:30:71:29:55:4e:aa:9e:96:
81:fe:5d:1f:12:e5:b4:c2:e8:34:3a:93:79:f4:9e:
0f:3a:e9:26:98:a8:5d:64:6d:c3:bd:76:7e:bb:14:
79:70:62:7c:3a:b7:58:8d:7c:85:47:3b:41:e2:36:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:4A:F4:53:ED:97:C7:EF:23:E3:DC:DA:55:87:AF:B4:E3:30:BD
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ff:97:5b:10:7c:71:8a:a4:05:e8:c9:24:3d:a9:0e:bc:a0:
91:b6:67:40:3e:0f:97:58:02:ef:c8:ac:bf:28:68:06:91:61:
9b:26:4f:96:1e:18:95:d1:17:4d:0e:ab:73:57:6f:44:a4:65:
f7:7d:95:f3:a7:88:55:16:10:00:10:1e:a3:59:2e:83:1d:7c:
47:9a:41:22:0c:4b:bc:1d:13:da:3f:98:cb:9b:32:53:23:c2:
dc:3f:fa:6d:e0:5b:ba:77:e0:35:4f:29:ee:19:34:ca:00:5c:
b8:7c:2d:f9:03:7d:2f:08:9b:e4:a9:ce:c0:4e:99:e7:d8:a7:
9c:59:3d:c0:10:84:e3:b1:dd:3a:83:ea:7c:61:e5:3d:5a:0b:
fb:25:a7:f0:6f:17:0c:a9:bc:fa:28:31:04:e3:27:cb:a2:ba:
bd:ca:61:9b:23:10:04:da:ba:6d:fb:15:8f:6a:de:6e:01:8e:
cf:74:91:d5:a7:7a:aa:80:3d:2d:5b:b9:ab:49:5a:e3:e0:c2:
59:5c:f6:5c:ca:5f:a6:25:2c:45:fd:dc:bc:ae:f1:3f:39:f2:
e3:11:f3:d6:ec:6e:60:3a:68:fb:6e:5b:34:e5:23:17:4c:8f:
fc:ef:ee:ea:b5:8a:b8:37:57:0e:27:a9:c1:a6:30:28:39:9e:
4a:bf:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:24:48 2025 by rpki-client