Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: Za+MtHIFxpCfI5KKHDry8d8VFrLpYfHlEpIlKOLN7D8=
Subject key identifier: 07:31:09:05:D3:1A:E4:85:89:DA:A1:31:EF:11:1F:8D:18:FE:3F:66
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 019922C30F6F48104728C9C692A44946C7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 025B
Signing time: Sun 07 Sep 2025 06:00:32 +0000
Manifest this update: Sun 07 Sep 2025 06:00:32 +0000
Manifest next update: Mon 08 Sep 2025 06:00:32 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: /DewIGKwdCbhuB8De9CHWuWRWzbnc4dV/ULkUijxDHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0f:6f:48:10:47:28:c9:c6:92:a4:49:46:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Sep 7 06:00:32 2025 GMT
Not After : Sep 8 06:00:32 2025 GMT
Subject: CN=07310905d31ae48589daa131ef111f8d18fe3f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:0b:86:67:08:78:fc:ad:b5:7b:60:0b:95:
70:79:fc:37:23:33:22:bc:46:b0:6b:63:8f:3b:04:
81:63:06:93:8e:8e:47:b0:01:57:3c:d4:27:ce:35:
88:99:05:96:3a:41:71:48:22:40:28:4e:19:6b:16:
d9:71:93:ca:86:b0:5f:24:3d:cd:52:0f:4e:35:1d:
10:8b:13:0d:eb:b0:d6:eb:f7:76:98:de:ea:2e:90:
d1:3f:6f:0f:68:92:95:45:82:07:6e:f3:e1:c2:07:
ba:98:6e:1d:6e:7d:da:2c:e5:45:e1:f4:23:b5:75:
a8:7e:36:f3:0b:83:c6:e1:95:88:ee:61:01:5d:85:
e4:7d:cc:c9:57:35:0a:77:6d:38:cb:5a:54:db:82:
f7:9c:53:7b:87:c2:f5:c0:88:a0:40:e8:a7:f1:1e:
09:99:6b:85:bf:c7:0f:b2:9a:c5:10:2e:4e:d4:3a:
10:7c:cf:80:dd:f0:21:39:3b:14:21:97:e7:f8:5c:
28:ac:72:48:1c:25:6f:15:f2:91:2a:b2:8a:79:c2:
76:70:32:bb:80:53:06:a7:9a:a8:d1:a2:ed:90:e0:
4c:6a:f1:60:ba:4e:1b:32:ac:e5:4f:30:1a:86:df:
b7:1e:58:f8:43:be:b7:a5:09:f6:49:5b:95:47:9f:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:31:09:05:D3:1A:E4:85:89:DA:A1:31:EF:11:1F:8D:18:FE:3F:66
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4d:e0:36:a4:d8:ac:34:50:23:40:90:d0:5d:62:7d:d9:dd:
66:ae:01:9e:88:b9:80:26:f7:3c:62:a0:2e:74:ba:cc:bc:6b:
9e:8d:4d:61:9d:34:8c:ef:a1:3d:86:24:fa:6d:5a:dd:ca:08:
47:ee:a8:6b:59:bb:69:44:9d:ab:d3:a0:cf:00:39:d2:d9:57:
d1:35:e5:59:09:92:2e:ea:5b:49:72:ec:8a:59:93:71:49:40:
3d:40:01:ea:4c:81:ac:1d:28:66:8f:b2:3c:f5:2f:56:c5:ba:
ca:e2:03:62:5d:60:15:a5:b3:28:d7:5d:70:96:f4:00:e3:31:
6b:3a:28:8a:e1:f9:77:80:69:2e:4a:ff:2e:47:6f:6c:d0:b4:
40:6b:ef:30:9f:7e:9a:ca:38:46:53:aa:30:86:95:62:a4:ef:
5f:87:e9:ff:28:9f:f5:bc:10:e9:5b:f2:7b:ac:98:6e:25:84:
0d:12:30:aa:6e:57:bf:62:2e:f8:88:65:56:df:67:ce:a6:f3:
8e:b9:34:bd:b4:90:0f:bd:81:f1:91:a0:19:81:71:f1:c2:8d:
6b:f9:2e:ab:d7:66:f6:fb:a1:b3:e2:27:44:86:0c:1d:67:bd:
7e:52:1a:4c:db:ce:59:0a:b5:b5:b6:12:67:d5:2a:ce:7b:aa:
00:78:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:26 2025 by rpki-client