Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: GiGAve5cGNqljA8eu6OLjaj59kU05ttNsOPWKTBFtKA=
Subject key identifier: 5D:55:5E:9D:AA:40:20:4B:5B:27:66:8F:BF:BC:44:CF:6D:62:60:CE
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019921B055C8E3B4539E21935F687D69D689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:00:28 +0000
Manifest this update: Sun 07 Sep 2025 01:00:28 +0000
Manifest next update: Mon 08 Sep 2025 01:00:28 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: Np0dK2vtEJROkuJA38OuWesMout5Jz1vzVeNP7v6Ros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:55:c8:e3:b4:53:9e:21:93:5f:68:7d:69:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Sep 7 01:00:28 2025 GMT
Not After : Sep 8 01:00:28 2025 GMT
Subject: CN=5d555e9daa40204b5b27668fbfbc44cf6d6260ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:af:5f:74:e3:93:33:eb:b8:1b:cc:ff:66:
80:4d:44:e5:fb:c3:c5:5b:aa:76:57:a9:57:6c:0b:
67:b8:a9:95:f6:b2:8d:7a:97:a0:84:e5:ad:cb:c6:
95:19:20:f4:c8:15:39:fe:4f:c2:65:0b:90:84:2c:
84:d3:11:2b:35:1c:5e:ca:c6:63:b1:39:e4:05:c0:
2f:e5:5a:39:04:c0:2a:b3:fd:01:59:f6:db:6d:bb:
9a:77:e8:b4:6e:07:6a:8f:64:74:b3:c0:b8:0b:59:
06:51:78:0c:a0:c5:df:a7:b7:78:aa:53:9d:49:01:
c1:60:74:40:6d:ac:88:b6:fb:f0:4a:2f:a2:dc:c3:
86:02:03:d3:ff:3c:d4:f2:e9:19:bd:fb:de:69:94:
4e:28:2a:5a:86:5d:f4:07:de:90:3d:74:37:a1:f3:
f0:60:38:3c:99:eb:12:47:92:ac:41:d5:eb:90:44:
5d:b2:43:d6:ee:b9:fe:98:ae:b5:11:af:9e:3e:fb:
ca:c2:98:dc:0a:91:c4:b3:7b:e9:79:f9:c9:df:91:
d4:eb:7f:88:54:5c:08:ab:dc:84:e1:a1:41:1d:86:
6c:d7:36:80:64:7f:82:d1:14:47:3e:09:77:b3:97:
46:ea:d6:1b:54:e1:e9:ee:39:64:2d:ab:47:e2:7b:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:5E:9D:AA:40:20:4B:5B:27:66:8F:BF:BC:44:CF:6D:62:60:CE
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:25:70:1a:44:8a:9a:6c:d9:1e:d3:da:7f:5d:23:aa:5d:
e8:94:d5:b3:e9:9f:6f:70:6f:2c:17:da:f0:bf:f1:ce:1e:33:
c3:74:a2:02:46:85:ce:63:5e:3e:d4:ff:d1:89:53:72:77:a9:
57:50:82:37:2f:48:21:fa:99:87:df:31:4e:35:e1:42:c4:c6:
30:85:1a:ef:bb:86:2e:d0:33:24:99:62:33:95:34:cd:32:1d:
c2:8f:e3:aa:fa:3f:3b:83:67:b1:bc:a8:bd:82:c2:0b:be:0f:
ef:8b:1e:05:1d:38:e2:f6:b6:de:4e:10:90:19:4e:46:b9:ef:
f9:22:a8:35:22:2f:a7:59:1c:90:97:70:86:75:56:3f:2e:6c:
3b:46:7d:dd:1e:79:24:2e:ca:09:05:75:35:0c:2e:7a:65:58:
57:85:70:20:4c:5b:6e:e5:a6:d6:f7:41:c0:db:6b:14:ca:16:
ea:de:cb:7e:65:50:26:dd:ef:02:b7:5d:60:ad:83:4a:25:78:
14:34:8e:cc:7b:20:0c:53:46:e8:47:25:da:0d:68:f7:4e:e5:
f5:4e:6d:13:3c:d4:3c:ba:8c:e1:87:19:00:c6:f5:24:74:58:
4e:15:7c:81:6d:a8:6d:3f:65:3b:84:b7:93:83:ff:e3:f0:71:
c4:fb:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:37 2025 by rpki-client