Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json)
Hash identifier: +RK7aXSUw6OK8HH+kez2O9vwr0bcfcIvJigETAYLG7M=
Subject key identifier: 7A:3F:91:3A:E0:12:96:2A:C0:40:C8:5D:5F:1C:92:9F:6B:02:D4:66
Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Certificate serial: 0199239F608349EEFEE08D0959DBF8D792AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 10:01:11 +0000
Manifest this update: Sun 07 Sep 2025 10:01:11 +0000
Manifest next update: Mon 08 Sep 2025 10:01:11 +0000
Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: zqCFyn6XgHEsFsqkxQxUpzaXxdbE9ltvNsGNvoJG824=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:60:83:49:ee:fe:e0:8d:09:59:db:f8:d7:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Validity
Not Before: Sep 7 10:01:11 2025 GMT
Not After : Sep 8 10:01:11 2025 GMT
Subject: CN=7a3f913ae012962ac040c85d5f1c929f6b02d466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:e4:58:68:9a:70:10:7a:0c:42:a7:b1:4c:
1a:39:c0:1b:1b:11:24:59:00:76:64:59:76:83:01:
64:97:25:7e:4a:65:f5:8c:3f:21:0d:79:04:33:13:
68:03:86:7c:f9:e5:53:1b:b5:d2:59:fb:d1:c8:3b:
74:ee:ca:d1:99:a1:15:cc:77:59:06:d6:03:68:68:
b0:2c:e6:39:31:2c:6a:b3:b2:00:64:f5:fb:dc:5d:
15:cb:bf:2b:30:94:c2:b0:52:61:19:1d:f6:e1:9f:
02:ad:7d:fd:47:e4:5d:79:88:98:ea:73:cc:c5:71:
55:11:f8:40:23:10:d7:30:d4:33:b8:dd:3e:55:0b:
98:35:66:73:cf:5f:5b:ac:54:d9:9e:c6:92:7c:5f:
ed:bb:84:e8:d0:29:92:c9:c5:be:13:b8:e7:ea:2b:
7e:96:4b:05:c6:a6:6f:2f:82:54:70:2c:82:8c:51:
78:80:66:26:fd:91:dd:71:3f:52:e4:eb:41:6d:5c:
ca:99:47:9d:ed:4d:23:91:fd:2e:87:d6:3b:5f:e6:
b1:b2:a5:7c:a1:01:8d:20:48:e4:6f:e1:e7:ae:ee:
53:07:f8:ed:20:80:b2:e5:29:41:5c:f3:54:ca:d8:
a4:43:a6:45:7b:a7:6e:9c:c5:07:03:05:a4:03:d1:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:91:3A:E0:12:96:2A:C0:40:C8:5D:5F:1C:92:9F:6B:02:D4:66
X509v3 Authority Key Identifier:
keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:4f:84:01:55:b8:83:8b:3d:45:04:24:cd:6c:fb:d1:5f:
5a:82:42:67:18:23:7f:09:0f:ed:ad:82:25:68:51:4b:c2:92:
60:d9:65:18:2c:99:76:50:b6:86:a7:5e:53:e7:8b:65:77:e1:
60:ed:02:df:38:db:af:c0:01:0b:2e:af:f1:ca:6a:5e:df:f7:
07:51:a0:2b:d9:8e:11:cf:0d:3a:7d:6a:a4:fc:a1:bc:0d:40:
b6:9e:0c:f6:e5:96:6e:02:44:09:c1:13:74:07:16:0b:0b:a4:
c3:a5:e3:08:31:99:92:7a:15:ee:69:46:81:61:6a:0d:e0:e8:
b7:77:d2:5e:c0:a2:7c:4b:73:14:a7:8f:62:31:af:ce:24:bd:
ca:77:28:f6:e0:5a:0b:f2:6a:49:ea:0e:ff:37:ba:e1:ac:9f:
84:62:fe:e2:72:1d:05:59:62:66:c6:f2:f3:c2:d8:17:5b:19:
28:a1:55:ed:63:4b:d2:83:56:16:03:9a:b0:98:33:e0:d8:dd:
de:28:26:4b:f6:7c:f3:a1:14:ad:86:35:b8:d1:12:d0:51:1e:
ac:14:92:6e:15:e7:86:bd:8f:34:b2:93:bc:f1:e3:3f:1b:55:
d2:99:76:9e:84:3b:0a:c9:d6:23:9d:aa:0d:6c:4b:2e:bd:d3:
c0:2b:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:35 2025 by rpki-client