Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
File: eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft (raw, json)
Hash identifier: du8GCMiN7XPsZcRfhj6wgRUrLdVTv14uN4lT9VE2d9I=
Subject key identifier: 62:D7:BD:1D:61:E9:29:FE:4B:63:BF:0D:DB:D1:1D:2B:CD:85:D0:99
Authority key identifier: 79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
Certificate issuer: /CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Certificate serial: 01992255C1C544180897EB33488BEC28FA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
Manifest number: 5A
Signing time: Sun 07 Sep 2025 04:01:09 +0000
Manifest this update: Sun 07 Sep 2025 04:01:09 +0000
Manifest next update: Mon 08 Sep 2025 04:01:09 +0000
Files and hashes: 1: eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl (hash: CfT7X+ws6Sht8wTZzVzM0nCrXWiJGoQhQtjKWogBolM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c1:c5:44:18:08:97:eb:33:48:8b:ec:28:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797eb445d12ac95547d0bb698268c944bd8c47a4
Validity
Not Before: Sep 7 04:01:09 2025 GMT
Not After : Sep 8 04:01:09 2025 GMT
Subject: CN=62d7bd1d61e929fe4b63bf0ddbd11d2bcd85d099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:bc:ec:99:13:c4:16:cb:9e:34:bd:d0:48:
0f:e0:76:39:3e:6c:72:3d:ef:ae:89:98:7d:74:88:
46:17:7e:4c:72:ab:ca:88:59:10:94:c9:ba:95:7d:
8b:c5:a0:d1:95:8e:95:da:d9:0b:4f:c0:4c:80:f4:
10:be:fd:99:72:60:5c:5d:60:5f:5c:72:ad:65:34:
56:a2:25:b2:1d:42:54:85:88:d7:d6:81:5b:b3:54:
90:0e:67:69:77:01:c2:f0:de:5a:9d:f3:24:56:bb:
a9:0d:bb:51:04:c6:d2:63:6c:10:f7:02:4b:ed:ee:
3d:0b:60:bd:2a:74:e6:85:7d:f8:16:ed:9a:7b:db:
32:0f:a7:2b:5d:5f:d0:2e:b7:33:f9:23:49:b1:1d:
6d:a1:e5:c2:8e:f4:bb:83:92:12:73:d8:0d:a2:37:
35:da:1e:88:90:b6:9b:da:23:22:00:70:d7:8f:50:
7f:7f:55:72:35:bf:a9:35:58:db:27:fc:da:16:a1:
2d:fa:c8:0d:c8:01:0f:09:33:33:8a:f0:13:97:52:
94:6c:0a:0c:ee:d3:f5:b3:9e:b7:3b:8f:17:f2:2b:
dd:49:70:6f:18:0b:70:1c:d1:5a:b0:07:ce:50:d8:
0b:f4:b9:ef:a5:27:0f:04:b7:fa:ab:44:12:90:d6:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D7:BD:1D:61:E9:29:FE:4B:63:BF:0D:DB:D1:1D:2B:CD:85:D0:99
X509v3 Authority Key Identifier:
keyid:79:7E:B4:45:D1:2A:C9:55:47:D0:BB:69:82:68:C9:44:BD:8C:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX60RdEqyVVH0LtpgmjJRL2MR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/326c13-a105-407c-84c8-7034d729b9cb/1/eX60RdEqyVVH0LtpgmjJRL2MR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:35:12:7d:ea:4b:2b:64:f0:78:88:ec:6d:dd:55:5b:dc:97:
ff:bd:df:7d:e2:24:19:7e:28:7b:71:99:dc:75:fe:80:e6:01:
11:8a:b8:ff:90:c6:5d:97:16:5a:f6:81:fb:78:86:2e:a7:9e:
bb:65:7a:45:cf:f2:22:1c:ec:e0:55:41:68:5e:51:26:e7:75:
0b:9e:1b:12:ac:17:22:6f:3a:b6:a8:ea:e3:70:e1:05:92:f1:
bf:d4:37:08:0b:68:61:59:bf:e8:5c:03:1c:5c:9c:0f:f2:22:
b9:79:4f:88:98:63:e6:95:a6:a2:bb:6b:57:79:e0:75:f7:9f:
7d:22:b8:95:55:fd:3e:a3:df:00:ae:b7:c7:a6:d6:dc:68:33:
56:94:2e:ac:34:db:7c:93:44:ec:29:4c:a2:d6:4f:70:4c:ee:
84:66:27:ac:35:f3:30:8b:fb:cf:b6:ea:a3:0d:bf:f8:10:5c:
80:ad:5a:b6:97:cf:96:8b:17:a2:fe:b1:b8:cc:b4:04:c8:7e:
9a:68:75:c2:70:2c:9e:31:1f:2d:96:88:85:9e:06:4f:f4:12:
49:85:f1:37:05:5d:ed:41:d3:99:a5:6c:b5:82:d0:0b:45:86:
31:cf:0f:ce:05:e5:24:11:a1:82:d7:e2:15:cc:bd:55:7c:9d:
08:2e:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:36 2025 by rpki-client