Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File: e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier: zocyBwJLweK6N/IxkQ7MiPEgIXTwzhq8KXPKaIFNMr4=
Subject key identifier: BB:B7:0C:2C:B1:E9:1C:5E:32:8A:41:30:88:42:A3:01:19:B1:E2:A8
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer: /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial: 0198530E0C059D43E8797ED0FD6BD3160187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number: 1540
Signing time: Mon 28 Jul 2025 22:01:26 +0000
Manifest this update: Mon 28 Jul 2025 22:01:26 +0000
Manifest next update: Tue 29 Jul 2025 22:01:26 +0000
Files and hashes: 1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: 5dNMbcf1I4SL1LxhLjdrZdV9s2T+G2YwmZFfjsOtb4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:0c:05:9d:43:e8:79:7e:d0:fd:6b:d3:16:01:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
Validity
Not Before: Jul 28 22:01:26 2025 GMT
Not After : Jul 29 22:01:26 2025 GMT
Subject: CN=bbb70c2cb1e91c5e328a41308842a30119b1e2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:c3:73:39:a2:97:64:5d:62:36:52:f0:40:
32:dc:09:f6:f9:35:67:8e:c0:5c:40:aa:98:ff:74:
ff:0f:4a:f4:28:80:24:a5:16:33:bd:0e:4c:c8:70:
e6:de:bd:80:e6:40:9d:15:00:8e:c7:e9:13:23:7b:
3b:b5:5c:ff:ef:0a:a5:cd:df:d8:33:8b:ad:1c:8d:
95:52:91:ff:39:c6:6b:fb:cc:57:15:0f:da:48:73:
2d:84:23:66:c3:2e:ed:43:8a:d0:98:46:c0:ef:e8:
76:8b:4a:ca:71:7f:4c:bc:30:bb:7d:5e:11:69:47:
ed:06:50:0f:c3:c5:bf:d2:a3:5f:66:08:fd:b9:71:
13:e3:c4:da:fe:c2:1e:71:35:d1:54:f3:a5:9b:ec:
0c:5b:de:d8:52:95:9d:03:61:17:e3:e5:24:70:d6:
08:19:51:8b:11:da:45:6c:ce:29:c7:2b:95:fd:37:
65:b6:0c:ed:d4:cd:bf:5a:f3:c3:80:76:3b:e4:fb:
f5:48:5a:95:50:82:4c:de:d1:7e:69:3d:b7:a6:64:
ed:c7:dd:13:5b:59:12:da:26:ac:f3:7a:cf:06:4e:
23:02:25:e2:e9:c2:cc:48:a1:15:43:11:54:1b:0c:
38:48:bd:d1:d1:86:86:6a:aa:38:78:ff:97:05:44:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:0C:2C:B1:E9:1C:5E:32:8A:41:30:88:42:A3:01:19:B1:E2:A8
X509v3 Authority Key Identifier:
keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:da:ba:37:99:05:84:aa:38:bc:10:28:cb:41:6e:56:84:b7:
3a:59:b4:b7:7a:a4:d2:05:cd:e0:87:65:1a:a2:c1:91:86:1c:
72:57:db:a7:ab:1e:d6:58:93:26:67:66:19:b2:53:95:b5:8c:
6d:e0:b4:66:c4:fe:a5:6c:69:84:84:88:68:8e:d1:2a:86:e1:
c5:95:58:84:ad:d2:34:89:ee:18:68:ae:85:f0:22:71:d4:b0:
71:88:a0:6a:07:90:e2:3f:4a:69:ab:eb:3f:44:fe:ab:bc:63:
2d:0c:3f:3c:d7:bb:7a:cd:3a:9b:f0:74:ad:77:39:f0:e6:64:
84:08:1a:a1:3e:42:09:3f:a4:98:d7:02:38:6a:dd:62:a1:6f:
6e:21:62:76:df:41:9e:f6:7e:04:8e:c3:17:9e:95:9c:3b:08:
6f:88:92:de:3e:13:81:a1:f9:0b:c9:5f:4d:32:05:d8:97:d3:
f8:27:6b:4f:74:e9:e0:67:d6:37:93:0f:4e:4f:5b:96:e7:8b:
39:79:4e:a4:02:a5:28:42:3e:08:46:f7:0b:25:f8:8e:7f:af:
a5:60:ec:cb:3a:19:1c:d5:06:12:95:5a:b4:72:66:6f:7d:11:
0a:3c:44:6c:52:ea:85:35:57:66:65:e2:5e:ac:6e:2c:f5:5d:
fe:61:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:13 2025 by rpki-client