Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: IWXVM6YDAhaOCj9QGIHjtUQtc1S6kfWlNihPYj4YMgA=
Subject key identifier: B7:A4:1E:39:9D:62:17:CC:4D:55:6B:60:00:A3:C4:CA:12:62:84:BD
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 0198380382770C2705079A58B62CE3DF716A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 10D0
Signing time: Wed 23 Jul 2025 16:00:10 +0000
Manifest this update: Wed 23 Jul 2025 16:00:10 +0000
Manifest next update: Thu 24 Jul 2025 16:00:10 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: nSXma/qlHCD3wRh/RDeR4Stucv/NpkRVENVzpu15RS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:82:77:0c:27:05:07:9a:58:b6:2c:e3:df:71:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Jul 23 16:00:10 2025 GMT
Not After : Jul 24 16:00:10 2025 GMT
Subject: CN=b7a41e399d6217cc4d556b6000a3c4ca126284bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:7e:4a:17:c6:39:51:dc:77:fd:2e:dd:3d:
c4:df:cb:cf:b3:6c:1a:03:86:d6:e7:1a:f7:ed:34:
d2:33:5b:d9:5f:43:86:cf:b2:5c:b1:cf:06:c4:bb:
77:f2:dd:fe:9a:ac:fb:ae:40:cb:bf:a3:36:1a:ac:
d9:e7:2f:59:0c:da:27:aa:34:c9:e3:d8:41:ff:e2:
f8:9f:0d:7a:c0:70:4a:6a:7d:11:c5:a9:3e:3f:49:
39:b5:ba:12:c9:1e:d8:5c:14:0e:b5:c1:24:08:89:
91:3e:f0:78:3e:d2:ef:44:a4:bc:04:25:4d:ea:4d:
09:76:70:3a:2f:3a:9a:77:21:73:8d:8f:19:47:02:
72:62:dc:28:78:cb:67:2e:60:28:08:c4:b1:86:60:
e7:43:d3:6d:d4:ce:6e:bf:e3:be:15:aa:14:d3:47:
e6:72:02:6d:e2:ea:9b:46:52:8c:51:ac:bd:7e:a2:
0e:32:93:33:a3:ce:8d:18:f2:4d:61:b4:cf:5a:7b:
c7:79:9f:70:c3:f9:3c:e8:e8:bb:b1:35:df:bd:90:
07:ff:ec:92:7a:64:14:58:dc:2e:18:be:df:b4:57:
fc:16:e8:bb:94:75:03:c2:ef:a2:d5:d1:b6:6e:74:
ed:29:85:cf:80:6a:55:2a:ed:94:2b:f1:c2:d7:da:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:1E:39:9D:62:17:CC:4D:55:6B:60:00:A3:C4:CA:12:62:84:BD
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:5d:2e:fa:46:84:bd:0b:b4:2c:48:91:a9:ef:36:1a:6b:
d8:98:bd:f5:d4:27:a1:ac:73:87:eb:70:97:5d:75:77:47:1b:
c8:a2:37:b7:48:f8:01:b7:f1:79:8b:89:57:78:48:f1:3d:8b:
8d:30:ae:08:af:2f:2c:7a:c3:63:52:26:e5:dc:80:fa:a6:ef:
88:af:aa:1a:19:9e:bb:52:15:41:18:73:e5:85:40:90:47:e2:
fe:12:b3:13:3e:69:f7:7b:df:2d:b1:66:f3:53:58:57:03:e5:
30:bf:f9:d9:46:a2:4c:cf:d1:5b:ef:e7:d9:40:f5:7e:e4:d9:
81:33:28:f3:3f:a1:59:4f:b3:b2:f2:f3:93:98:2b:c3:62:c9:
be:6b:af:bf:5a:46:51:e6:bb:17:36:5d:68:5e:d8:9d:f1:ea:
fd:35:20:7b:8c:a8:d8:a0:20:87:eb:68:3d:92:c7:ff:33:4e:
9c:69:de:4b:c9:5d:78:bc:b0:50:18:ef:4e:55:51:be:5b:84:
d5:cb:e6:0b:5d:54:83:cb:9f:7d:8d:a6:1a:a5:4d:4b:5d:9f:
dc:bb:42:21:0e:d8:e7:e7:5f:a2:ed:ca:f2:69:fb:0d:a9:86:
aa:70:75:25:27:22:fc:f8:cb:21:a6:92:26:71:99:ad:e3:d7:
82:04:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:48:15 2025 by rpki-client