Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: IcrxvZ1+HJd6OTQOhn48hogvuig0Xb0Ipug/EPblLfw=
Subject key identifier: 01:F7:D7:E4:52:CB:F5:37:C0:2D:EA:D6:48:FA:9D:35:6E:29:7F:FF
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01984A0A44577F242FB701B47751451F7296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 080E
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: 0/BAoRCCuE2tBmsyZziRub2IUvJrOcejFgLBBDDu2RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:44:57:7f:24:2f:b7:01:b4:77:51:45:1f:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=01f7d7e452cbf537c02dead648fa9d356e297fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:a0:c4:8a:c1:e4:fe:f4:b9:62:d2:ec:98:
88:db:ee:bb:a6:8e:e3:f0:0d:b9:32:a7:0d:ab:53:
bd:8c:3c:1e:48:8e:ee:2a:ae:2f:6d:f7:f5:d3:99:
25:5e:22:b2:7a:7c:e7:21:76:39:87:fc:6c:f9:e7:
d7:4f:8f:16:12:02:2a:9f:8b:12:51:82:8f:61:6a:
4e:9d:98:7e:ef:5e:ea:1f:33:eb:83:c4:7f:1f:11:
9d:33:08:8f:f1:c1:df:a5:cb:67:11:a7:33:a3:b2:
5e:aa:8b:56:00:e7:7e:d0:7d:c9:3c:3b:85:3b:64:
fd:df:c8:0b:6d:29:08:d1:9d:f7:f6:a2:b8:6e:48:
63:2a:1e:87:9f:df:c2:5d:48:47:b1:82:86:3b:49:
d6:e9:b2:82:bd:3a:66:53:f1:0d:47:d9:8a:b9:ca:
dc:cf:91:33:ab:9c:84:9e:91:1d:b5:4b:ba:11:d1:
f9:69:86:40:f9:a8:cc:5e:18:51:f1:50:63:f6:5f:
8b:03:2a:68:b9:ff:fa:8b:1b:f9:b4:27:98:47:bb:
4e:7f:67:bb:67:67:b6:1d:20:39:15:ae:ba:26:28:
b5:7e:11:a9:46:3e:99:b9:0f:c2:b5:09:0b:17:e7:
10:16:fd:af:d6:90:14:29:65:ca:1d:a5:9b:a6:62:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:D7:E4:52:CB:F5:37:C0:2D:EA:D6:48:FA:9D:35:6E:29:7F:FF
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b6:ab:c1:29:41:3f:ff:09:7e:6e:3f:ff:b5:e9:50:b6:c1:
a1:7b:20:7d:0c:36:f1:c8:e2:84:9b:2e:a9:a0:72:b1:5f:1c:
e6:ca:9d:a9:c6:97:6e:78:a4:fb:05:32:81:a7:4b:de:ac:45:
20:b9:68:a2:74:5a:30:70:98:2a:cf:5a:91:b1:68:61:3b:f0:
8b:34:1d:27:00:a4:8f:29:b6:f7:c6:00:d5:d1:17:56:1a:19:
0b:fd:f4:52:ce:a8:0a:28:f3:2c:a3:00:56:65:b5:1d:11:5a:
ae:f0:96:ca:2e:fc:5c:ec:b4:9c:13:eb:04:8b:c4:92:02:91:
5a:b1:7d:d5:35:f8:79:65:79:e2:b6:5a:d0:48:68:ec:fb:a1:
b5:50:a3:ea:23:c3:d4:87:a6:c1:21:f9:7b:34:32:d4:c1:6f:
82:5b:42:fa:50:df:bf:c3:ac:9c:e9:a4:04:95:98:86:c2:d5:
47:17:b1:25:ae:63:78:7e:e8:fa:b9:3b:40:cf:bd:d8:cf:e1:
47:4f:57:55:e9:38:93:be:4d:2a:d0:34:4f:64:86:d7:ea:c0:
3e:a5:07:46:57:7a:fd:3f:12:f8:57:f2:f8:eb:f8:3b:52:b9:
b5:f9:e5:bf:1f:a5:8e:b3:49:19:d0:43:e3:42:61:7d:6e:6a:
e6:16:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:05 2025 by rpki-client