Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: J/38SRHH2jNx4pRo1eJNFV44mQ8BpoeCvHQzn68HYfk=
Subject key identifier: 89:16:54:B5:DE:5E:3E:C2:D5:24:84:2E:02:72:9A:95:66:C6:AB:BA
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019848C0AB4BDF2EFB93F66CF102BA081387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 10D6
Signing time: Sat 26 Jul 2025 22:00:42 +0000
Manifest this update: Sat 26 Jul 2025 22:00:42 +0000
Manifest next update: Sun 27 Jul 2025 22:00:42 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: cPuqDJdVSgZs0QZ+X3egl+ujrnlaGdNFWxnAevsu1ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:ab:4b:df:2e:fb:93:f6:6c:f1:02:ba:08:13:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Jul 26 22:00:42 2025 GMT
Not After : Jul 27 22:00:42 2025 GMT
Subject: CN=891654b5de5e3ec2d524842e02729a9566c6abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:ba:d4:3c:d6:b5:e5:c7:c8:32:e6:76:b4:
ec:0f:df:7d:4b:be:3a:9a:f8:72:57:0e:5f:30:e9:
d0:3a:e9:0c:de:27:68:7d:e5:18:a3:02:0d:60:ec:
73:f5:34:b5:64:ea:ee:5f:c6:04:36:23:60:94:59:
dc:1a:76:1d:ca:78:12:d1:67:be:46:ab:b8:80:2c:
47:d5:d9:1a:c3:3d:21:a9:e9:b2:42:da:3f:f6:18:
a7:df:50:c1:93:40:73:18:02:ec:50:1d:98:6b:91:
34:12:e5:b9:81:61:90:b8:97:c1:d6:27:91:2d:6d:
b6:8b:b0:a3:a5:50:dc:ad:a8:ae:69:4e:b5:55:1f:
94:c3:66:cb:7b:d1:6d:5f:47:53:57:5d:01:a7:91:
57:18:33:62:5c:ef:5c:f4:34:ea:2f:fa:45:d4:05:
c1:72:f4:9e:9f:ed:fc:93:d6:6f:65:b9:d7:59:69:
5a:11:8d:60:72:f8:89:c1:81:d1:1b:bf:ad:22:fe:
13:4a:39:c3:8d:37:94:1b:45:74:be:15:e3:95:c2:
84:62:e8:70:64:50:ff:5a:fc:c7:55:a4:87:64:c5:
b1:02:8e:55:51:da:7a:5b:1c:93:9c:aa:19:e4:78:
3d:f5:37:66:56:45:c3:34:52:4f:91:f0:2c:31:a8:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:54:B5:DE:5E:3E:C2:D5:24:84:2E:02:72:9A:95:66:C6:AB:BA
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:c0:43:96:a3:55:67:8b:d1:74:70:e7:13:8b:7d:bf:11:
97:a4:48:26:56:7c:f5:6e:39:12:cf:61:d1:9b:1f:bd:d5:b4:
8d:77:03:57:df:44:2e:ab:0a:33:4a:53:c3:60:72:44:3c:ed:
75:45:ad:7d:63:ef:c6:91:18:cf:cd:7d:a5:ef:99:e1:c9:6e:
6a:04:40:9a:66:1c:d6:ab:21:83:89:cc:f9:24:ce:93:3a:53:
19:b6:10:98:1c:b2:44:b4:93:cf:97:2a:9f:e1:f8:67:ab:ef:
41:29:08:09:57:45:8d:1f:0d:be:d5:ef:3c:36:28:50:17:78:
84:70:8a:2a:54:33:61:09:45:a5:e7:7f:8e:0d:03:ca:5a:22:
e8:24:97:f2:69:96:5b:8f:e1:49:53:95:41:d3:f7:44:e4:69:
af:b5:ec:cd:f8:d8:09:fd:bb:5a:b7:4b:cd:1c:95:fc:bf:92:
81:ed:99:f3:6c:2c:3d:c6:12:24:2a:ab:1b:58:06:18:02:39:
98:70:83:0a:aa:df:e6:aa:1c:c4:d8:62:76:49:c3:2d:17:a5:
33:d5:84:a0:b1:8f:88:ec:f1:58:43:cd:aa:e8:26:90:b7:b6:
c2:ed:13:16:c7:b4:c1:cf:fb:cf:0a:eb:99:f2:7b:ca:dc:0c:
c2:2d:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:06:49 2025 by rpki-client