Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: 3mYVvwBjOpFa5n7o8g9ciM24DsM40voG+OBLOwDYchs=
Subject key identifier: 08:D6:27:1C:8E:04:45:5A:C0:76:D8:21:80:82:E6:5C:EA:C7:68:E1
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01985AFDBBB44AB6AFD542640794D83FC894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 11:00:34 +0000
Manifest this update: Wed 30 Jul 2025 11:00:34 +0000
Manifest next update: Thu 31 Jul 2025 11:00:34 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: eImWg/QpfuxJMwKn/WyOpX9E+nj8Q4HSn/m0IN++SCQ=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fd:bb:b4:4a:b6:af:d5:42:64:07:94:d8:3f:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jul 30 11:00:34 2025 GMT
Not After : Jul 31 11:00:34 2025 GMT
Subject: CN=08d6271c8e04455ac076d8218082e65ceac768e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:da:5f:d1:b6:d0:10:8f:11:44:85:23:df:
73:1a:7a:be:30:e8:39:33:3a:8a:43:fc:db:78:fd:
9a:6f:f9:e9:51:36:8d:04:bb:2b:56:fd:06:f5:9f:
ad:ef:4c:22:d6:83:e4:0a:b3:db:60:f2:95:3c:34:
99:5e:10:ab:6c:73:7d:e4:d9:3c:69:5e:64:ed:2b:
b0:54:b2:6b:11:88:5c:c1:2b:ba:06:54:e9:a1:61:
51:7c:65:d5:46:b0:7f:70:b8:01:40:84:5a:49:46:
5e:d9:55:5c:c0:76:e8:7f:da:ee:14:2e:38:f0:88:
73:07:3e:cf:08:f1:f6:8e:86:dc:57:64:e7:27:a2:
b4:d7:e9:26:88:67:63:fb:bb:e9:8a:9c:62:49:4f:
d0:4a:a7:70:8e:f6:47:2c:31:bb:32:b8:f7:ac:fa:
6d:ed:9f:00:20:ad:ee:4c:be:1a:b8:48:a7:81:c1:
a8:a4:80:0f:31:0e:6c:d5:55:3d:2c:ee:c7:de:55:
04:eb:6b:b0:c7:da:86:11:95:c8:56:3b:4e:43:39:
3f:09:9d:13:71:6b:ef:38:b5:32:ff:5a:3e:5b:db:
4b:ea:a3:cd:bc:9b:0a:e9:c1:b3:c5:92:ef:47:c0:
22:83:ee:59:3b:d5:16:91:58:4e:69:7f:82:03:54:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:27:1C:8E:04:45:5A:C0:76:D8:21:80:82:E6:5C:EA:C7:68:E1
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:94:d6:2d:79:8e:c7:a6:18:97:33:4f:7d:5d:7f:b7:0e:ca:
a8:cc:30:b9:11:e5:fa:0e:63:fd:e1:af:b5:c2:d1:36:38:b4:
32:1b:38:61:aa:f2:53:9e:93:49:fa:f7:2b:bc:12:d3:0d:ec:
e1:97:1c:71:ec:c1:79:a4:41:bd:e5:e4:6b:d8:db:15:d5:b7:
46:06:9e:04:2e:4e:bf:60:4e:7d:41:78:58:95:b6:bf:df:fc:
46:ff:d4:15:69:49:bb:9e:77:c4:77:1c:a5:55:cf:81:1c:86:
f4:a9:12:1f:61:08:66:d8:8e:bc:1e:0f:f7:97:b1:50:a1:57:
4d:70:62:42:68:de:ef:f6:c9:03:b3:55:dc:ae:7a:56:8b:3a:
1f:46:ff:31:fa:db:8a:fb:4a:ab:11:35:67:6a:a7:7b:26:59:
35:09:36:99:9b:54:23:68:56:e6:ba:3a:d1:ad:fe:ad:91:ae:
96:06:26:49:1a:ec:a4:52:d2:ac:2c:70:2d:02:58:b5:ae:ba:
be:c4:26:8d:6c:57:c8:a0:df:b4:c9:27:a8:38:d3:0e:2d:61:
87:df:f0:4b:cc:96:ad:18:d8:30:7c:10:02:51:30:57:4d:23:
13:f6:a7:78:bd:d3:a0:1b:71:c0:0f:ff:b0:2d:a1:1c:7c:bf:
db:c6:c2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 12:49:27 2025 by rpki-client