Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: WgdmMEBztPk0HxoQiQ0o02oFYmbegtWA3PlcC+1jRW0=
Subject key identifier: 0A:9B:92:5E:4F:4F:A9:4C:8C:E7:A1:ED:8F:AB:3B:67:EE:92:A6:10
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 019921E75C7919161E764514E5060564707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:34 +0000
Manifest this update: Sun 07 Sep 2025 02:00:34 +0000
Manifest next update: Mon 08 Sep 2025 02:00:34 +0000
Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: zN0JLGgey4Ox7Ots2DzrhcmdjUzksRJiJyBE6ETPb3k=)
2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:5c:79:19:16:1e:76:45:14:e5:06:05:64:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Sep 7 02:00:34 2025 GMT
Not After : Sep 8 02:00:34 2025 GMT
Subject: CN=0a9b925e4f4fa94c8ce7a1ed8fab3b67ee92a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:ed:b9:78:67:97:95:a8:69:e7:15:fa:2c:
96:38:f6:27:e8:c9:b7:ac:0e:3f:39:c6:61:ee:4d:
8f:c7:c9:99:e6:29:f0:d2:9a:26:e0:c5:a5:6b:31:
d7:71:ad:90:bf:c3:36:f3:bc:d0:3e:06:ac:28:85:
3a:e4:97:c1:05:bc:e6:a8:76:0e:10:06:d8:3e:11:
5b:05:60:b0:eb:c0:08:05:6e:44:fc:80:fc:85:79:
3b:5e:0b:c9:cf:a6:4c:4f:0f:b6:7b:01:8c:79:2a:
2a:c3:e3:8e:31:eb:8e:ea:64:25:f7:5e:0a:5e:e7:
3f:16:76:0d:18:02:f0:21:a2:84:0e:b6:84:57:65:
c7:aa:0b:d4:c1:77:7b:0f:1b:a9:f0:09:fd:eb:91:
99:85:33:9f:85:93:7f:27:e0:78:fa:f0:3a:c7:77:
e9:c0:d4:8d:04:e6:32:9b:59:3b:aa:40:55:c0:bb:
61:a1:51:e0:b8:80:ae:5a:a3:ff:74:82:df:da:31:
ab:eb:c6:91:a8:ed:a4:3a:29:0d:da:f9:89:59:77:
cd:c9:1b:dd:c0:f3:7a:23:48:24:b8:ac:11:dc:54:
2a:f0:95:9e:c8:38:44:3e:9d:75:84:6e:7e:a3:ed:
e7:3d:4a:91:8b:72:b2:26:77:cf:b2:2c:a6:53:c7:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:92:5E:4F:4F:A9:4C:8C:E7:A1:ED:8F:AB:3B:67:EE:92:A6:10
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:71:37:fb:f9:34:0a:e2:02:b7:ba:e7:dc:88:9a:9e:c8:
45:90:1a:10:db:08:58:69:66:da:d8:7e:f6:f0:29:cb:8c:cf:
11:6b:00:e4:9b:bc:ba:62:8a:a1:22:35:75:25:1b:48:ef:ef:
d2:52:25:71:27:a3:dd:fe:d3:6d:3a:07:48:37:9d:55:3d:05:
d2:90:c5:ff:40:fa:64:a9:07:c4:b4:42:f8:29:0d:39:09:41:
2c:75:5e:06:ca:8e:2d:11:b1:f7:1d:ba:c5:92:80:3f:38:d2:
d4:21:a0:69:fd:bf:11:4a:de:34:01:7a:cb:b8:76:60:0c:11:
43:ae:39:d4:ea:d0:38:93:55:a5:26:b1:48:c8:16:1e:09:78:
3d:c2:36:8f:e5:d3:7b:e4:6b:b1:b2:77:db:58:1d:86:1b:92:
20:a2:30:70:4e:86:9a:1d:cb:87:52:8c:e6:38:2e:28:e2:f1:
84:70:13:d9:73:01:ef:6b:03:41:4b:3d:e2:7a:7f:18:34:4c:
b9:68:c0:a5:12:fb:91:8f:81:5b:5e:71:98:72:ad:04:43:33:
52:eb:b4:59:bd:90:64:5b:ca:2b:70:f0:52:bc:ee:7f:37:47:
5b:9d:b8:14:4d:eb:32:78:8e:a6:5f:9d:4b:5a:c3:9e:53:a6:
5b:b3:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:06 2025 by rpki-client