Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json)
Hash identifier: OAspwVbPqMes0q/7WrlHtamqiftGXRMAXkis0s10Qsg=
Subject key identifier: 0E:5B:1F:42:CE:5E:B2:0F:C8:BC:C8:77:15:EB:14:A3:FE:B6:C4:06
Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Certificate serial: 0199239F95D50CE5AF929373B8359EA017F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 10:01:24 +0000
Manifest this update: Sun 07 Sep 2025 10:01:24 +0000
Manifest next update: Mon 08 Sep 2025 10:01:24 +0000
Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: p8r4xWLwrAmBl9tQksh04tGniCFuwOex9bih43CdLLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:95:d5:0c:e5:af:92:93:73:b8:35:9e:a0:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044
Validity
Not Before: Sep 7 10:01:24 2025 GMT
Not After : Sep 8 10:01:24 2025 GMT
Subject: CN=0e5b1f42ce5eb20fc8bcc87715eb14a3feb6c406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:62:2d:71:99:90:ca:b8:78:42:dd:e4:72:
36:0a:a8:bf:4f:f4:b2:b4:3e:98:cb:8d:eb:82:bf:
f9:9b:e4:24:c0:93:45:98:27:0c:1d:c5:9b:3b:f0:
96:05:51:18:7c:a4:fe:58:be:8d:60:30:bf:6d:c0:
9e:84:3c:a3:5c:78:7f:c6:7f:87:3b:65:3e:9f:a9:
c5:ca:8f:be:d7:cb:f2:87:6b:fc:54:8d:5f:72:82:
12:37:20:e7:10:bb:01:fd:8e:ba:5d:16:6e:42:fa:
6f:dd:ec:df:b4:d5:8b:34:0e:97:a0:18:09:9c:82:
12:d7:62:d6:9d:ce:6b:5f:94:cb:ce:d9:1f:fd:58:
99:de:c8:54:37:f2:4d:34:9f:28:99:1b:25:cb:01:
4e:65:51:78:a9:fe:67:b1:6c:b0:82:5a:b8:37:52:
1c:f2:b3:3f:8f:06:b9:f0:d6:b6:ff:2b:ce:30:f1:
5c:f6:e0:c4:7e:83:6b:6a:a9:b0:64:40:a1:6a:33:
96:ee:cd:74:26:43:f1:ab:37:4e:ca:6e:38:3d:72:
f7:36:ea:78:01:27:7f:d2:62:53:a3:3d:e9:14:fb:
28:a8:b7:02:76:5b:11:95:e8:1f:c5:09:55:b9:4a:
5e:43:e7:84:43:d0:32:24:5d:9d:94:5f:4f:df:bb:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:1F:42:CE:5E:B2:0F:C8:BC:C8:77:15:EB:14:A3:FE:B6:C4:06
X509v3 Authority Key Identifier:
keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:cb:86:0f:f2:4a:8a:7c:67:13:d2:d6:77:68:9a:af:f8:
5e:e6:e1:c3:7f:7e:99:0c:9c:fb:ef:b9:f5:e2:b8:56:02:ed:
fd:bc:d2:6a:14:50:6e:4b:23:40:d8:e6:6a:98:0e:04:1e:42:
f4:ac:59:3b:99:73:88:4c:22:19:6f:82:6c:b6:2e:53:54:95:
4b:5c:be:8b:24:66:83:52:fb:78:0e:96:92:da:46:c1:61:7d:
02:47:96:c8:7c:03:8e:1f:7e:80:23:bf:2b:fa:55:4c:5c:be:
8a:bb:cf:a1:f7:74:f6:2b:1b:fb:f4:a8:e4:ec:f1:0d:28:ee:
5b:b5:c7:8a:f2:26:a9:ad:4d:bf:88:51:e0:6d:29:03:fb:12:
e4:16:6b:53:4c:b9:3b:0e:47:c8:b8:3e:a7:52:96:4e:57:05:
62:17:b3:c8:21:67:9d:f3:89:79:46:a6:fc:f8:6c:b4:de:e6:
5e:5a:0a:6a:c9:a6:7c:db:d0:62:0e:63:d4:16:33:61:2a:4b:
58:41:1e:85:d3:b5:93:a1:fd:18:92:45:97:02:81:dd:f8:db:
2a:32:04:f9:86:87:a7:7d:00:b2:9d:56:34:f0:6e:a7:7d:58:
08:d7:c6:a5:ff:5f:2e:dd:6a:5b:32:0c:de:5e:82:c3:78:0e:
5c:76:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:02 2025 by rpki-client