Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: E+MKBWugtDnzM3w7J+PDgi1Wli+w/x3hjV+XWmxpYXA=
Subject key identifier: DD:52:8C:97:1B:27:E5:66:3B:B3:D8:68:29:47:28:65:BC:2A:39:E4
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 019922C335BE7D69E8C1A665021BAF524D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 0670
Signing time: Sun 07 Sep 2025 06:00:42 +0000
Manifest this update: Sun 07 Sep 2025 06:00:42 +0000
Manifest next update: Mon 08 Sep 2025 06:00:42 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: +FPgYLmEibhRVRAYIVETe+n3s+FY6ycMk955KhhnuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:35:be:7d:69:e8:c1:a6:65:02:1b:af:52:4d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Sep 7 06:00:42 2025 GMT
Not After : Sep 8 06:00:42 2025 GMT
Subject: CN=dd528c971b27e5663bb3d86829472865bc2a39e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:26:5e:a4:5f:1c:12:08:8e:fa:8e:9c:2b:
f4:76:59:dc:01:80:fe:bd:eb:f2:a5:00:78:91:f3:
ab:e6:f1:37:ef:d6:6c:a2:e0:19:4a:32:64:1b:a7:
95:99:5d:6a:d8:ce:4f:2b:12:61:f4:4d:d3:89:8f:
f1:62:bd:7b:5c:8c:85:fb:42:ab:e6:3c:66:a2:38:
dc:17:7f:cf:af:db:69:2e:4b:d8:49:d3:e7:2d:5d:
d5:b0:16:e6:4d:9d:ad:f0:bc:96:b4:ea:e5:ab:68:
ed:32:8c:dd:19:e3:69:97:d8:56:ef:10:e8:11:67:
2a:80:40:6d:5c:76:4c:ff:26:f1:73:c1:ea:2a:e1:
61:ae:19:88:63:c8:e2:8b:fa:44:cf:cf:ba:a3:30:
6c:26:26:d8:99:3f:9a:10:da:51:37:bd:60:f2:41:
ac:db:ed:b5:3b:8b:56:ad:be:39:14:d7:85:a6:f8:
b5:b0:8c:09:e8:e1:12:af:57:37:4c:ba:17:4c:4f:
16:8a:f0:26:a6:a7:81:7c:6c:b5:c8:e8:09:a2:b2:
02:8e:b9:29:fa:94:d5:06:b9:44:d2:3e:0f:1d:72:
24:19:58:63:e5:f4:86:91:c2:92:82:b5:76:de:ad:
48:99:d7:b6:c7:fc:79:10:97:c0:d2:fe:92:65:1e:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:8C:97:1B:27:E5:66:3B:B3:D8:68:29:47:28:65:BC:2A:39:E4
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:b7:bd:1e:e7:13:40:1c:3c:7b:e6:89:32:d1:02:e3:67:
a6:bd:37:b7:1f:ab:5a:41:24:dd:e1:2d:9a:44:ba:dc:fe:c4:
7f:e4:cd:25:ae:1b:d1:8e:c7:d5:63:ce:fb:39:6c:7c:90:c9:
d8:8a:be:d8:a7:73:1f:d4:09:64:a5:f3:0a:1d:42:b8:6c:ab:
1f:b6:97:ee:b4:7f:4c:11:50:1a:fd:c7:29:ba:47:33:f2:77:
b6:92:a6:a1:4f:80:9a:27:67:28:7d:56:cb:d2:9b:ab:f2:b1:
00:93:1b:45:67:16:0e:a5:fa:b1:8d:1b:e3:58:ed:8b:cd:85:
9e:0e:57:a9:59:4f:25:27:51:22:40:d5:b8:98:db:98:bc:34:
96:7f:74:18:da:9e:32:88:52:7b:01:0b:7b:6e:1f:22:46:7a:
cf:14:8e:99:87:3b:47:40:ed:f5:25:2e:11:4b:56:4e:dc:86:
de:42:f2:af:90:b2:8c:57:56:01:49:3f:c1:a9:a3:5f:90:cf:
85:c1:51:6d:e6:52:b5:ec:30:a6:31:48:96:e5:a9:72:ae:3c:
14:78:fe:8b:ba:b1:a9:c1:d2:61:50:0a:da:03:35:a0:85:24:
3d:42:c8:0f:c4:c4:69:06:25:2c:62:9f:6d:ad:20:3b:09:f6:
05:b9:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:41 2025 by rpki-client