Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: 1HMs8TKnqdTBp6WIEZE/uRRAKmt3MdlmJN+sIon62gc=
Subject key identifier: FA:65:41:AE:16:A1:E4:38:69:53:9C:BC:7D:B5:8B:C5:FC:04:7F:6D
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 01992255671E7B51EBDC0E760A04967BB14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 0218
Signing time: Sun 07 Sep 2025 04:00:46 +0000
Manifest this update: Sun 07 Sep 2025 04:00:46 +0000
Manifest next update: Mon 08 Sep 2025 04:00:46 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: lV5IIRxhxZg8s8WaW3tipSnylfWMQE1lEdbpPq/RE50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:67:1e:7b:51:eb:dc:0e:76:0a:04:96:7b:b1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Sep 7 04:00:46 2025 GMT
Not After : Sep 8 04:00:46 2025 GMT
Subject: CN=fa6541ae16a1e43869539cbc7db58bc5fc047f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:70:27:10:a5:02:cc:d7:33:36:d7:d9:8a:
4c:c2:79:67:2c:88:2b:ee:09:62:c6:e8:dd:77:6a:
df:07:73:c7:35:77:41:ab:01:4c:e1:a5:d3:af:44:
3a:de:49:c4:d3:b0:76:c8:f3:45:b1:2c:5b:6f:e4:
68:b2:56:f8:f5:78:2d:c0:81:59:15:4f:07:0d:12:
3c:73:1b:41:82:ee:ca:11:5a:0d:6f:0a:14:e9:18:
2d:ff:da:07:eb:46:f0:25:a6:2d:15:c2:0e:b7:09:
25:87:29:3b:0f:54:ac:66:f8:01:00:9b:c3:fe:3f:
b2:b7:4c:11:02:44:28:28:ad:66:3c:2c:2b:3c:de:
4f:01:40:ef:02:15:9a:e2:19:39:71:1d:5e:dc:92:
15:d3:77:a7:4d:63:98:37:0b:91:b7:9b:01:43:cd:
0d:c8:08:b8:0a:58:c2:70:5d:97:b1:9d:df:7a:8d:
a2:76:2a:28:bc:11:c8:05:5b:65:af:f6:66:b9:61:
93:4a:65:80:04:13:f6:cb:85:ff:b3:8c:a4:9f:71:
04:4e:42:e6:d0:6f:08:f9:13:be:9e:ce:0d:bb:41:
b4:b9:76:13:22:ff:9b:31:89:31:7c:5e:86:bc:e9:
1d:d3:01:1f:92:bf:23:03:5a:2d:84:94:4f:aa:69:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:41:AE:16:A1:E4:38:69:53:9C:BC:7D:B5:8B:C5:FC:04:7F:6D
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:24:4a:50:77:83:d9:18:da:d5:30:af:72:61:8d:1c:e4:d1:
49:a0:45:91:29:04:90:7a:45:b4:00:fe:fe:71:eb:15:7b:e9:
fc:b8:d5:b6:10:ea:8f:ec:73:1d:7c:33:0c:76:5e:9a:1e:8c:
d4:53:c6:2d:1b:47:2a:5a:bb:91:f2:23:69:da:d4:f6:24:c9:
61:4d:a7:c9:83:4e:df:38:d7:21:19:cd:76:05:1f:20:64:d1:
76:90:e3:ad:b7:fe:ce:d1:8e:0f:6b:6f:19:8a:86:b3:10:07:
fa:1c:ff:3e:5e:5c:ec:a5:2b:dd:cb:d3:ce:2b:a6:ec:f1:99:
2b:7a:ac:79:30:45:a6:5f:4a:16:5d:f3:52:4b:29:cd:b1:86:
6e:08:29:c1:01:54:06:41:d2:fc:89:08:5c:81:b7:7d:0d:fe:
67:9c:62:e2:22:0f:a4:00:68:f6:61:5a:51:4d:4a:89:cd:3f:
d1:20:ae:4a:d8:46:eb:78:29:2a:1d:3c:e4:4f:cc:b1:f0:7f:
49:f8:94:d6:70:ea:5e:dd:23:31:f1:f7:47:c7:cb:22:c6:85:
ae:44:ea:22:38:5f:2a:21:d0:0e:d0:89:ea:4c:53:c0:db:6a:
88:7f:c7:31:55:0c:a7:9b:6f:6c:74:f0:d5:f4:c0:b4:4b:c4:
2f:c5:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:06 2025 by rpki-client