Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier: 1fdVo7MDmUsBtyWZSi0zfn9DGWkrpYpwnSgL51u1SWM=
Subject key identifier: C7:69:99:23:70:7A:3B:E3:C4:7F:8E:09:44:4E:6B:C6:08:A5:2B:6D
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial: 019922FA78A53FD7B630A1971B1A8C4DE97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number: 13D7
Signing time: Sun 07 Sep 2025 07:01:04 +0000
Manifest this update: Sun 07 Sep 2025 07:01:04 +0000
Manifest next update: Mon 08 Sep 2025 07:01:04 +0000
Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: 1QZfCUxIHPHo+F34k+TftFnE2aZQysVh6CCOywVB7fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:78:a5:3f:d7:b6:30:a1:97:1b:1a:8c:4d:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Validity
Not Before: Sep 7 07:01:04 2025 GMT
Not After : Sep 8 07:01:04 2025 GMT
Subject: CN=c7699923707a3be3c47f8e09444e6bc608a52b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:da:90:d3:42:60:49:7d:d4:46:1f:d2:80:
79:09:5a:83:60:3b:6f:3c:a4:c8:2c:b5:5b:1a:e3:
b8:65:48:db:ea:d5:bf:1a:4f:53:e4:36:e1:79:a0:
96:7c:a6:33:69:4e:7f:a3:72:2f:83:a9:e4:8f:69:
b0:75:2f:e4:2e:f2:54:82:66:ba:6f:af:bd:86:53:
d7:b0:76:f1:52:30:c8:1c:cf:59:f5:6c:42:25:bb:
6c:3a:c3:9c:a4:78:f4:7f:15:0f:1b:09:d7:10:55:
a5:76:9b:48:4f:c2:66:51:c9:f2:8f:a5:a1:6a:fb:
4e:d9:3b:47:d9:b1:9b:ea:21:9a:bf:05:f9:c0:07:
88:f1:ea:89:4f:dd:74:31:d5:4f:15:ad:5c:f9:b1:
43:a4:47:7d:c9:58:84:6e:8d:8e:d5:f6:dd:c7:7d:
16:82:5a:eb:9e:dd:fb:89:1b:be:bb:da:f8:02:e7:
93:83:93:14:9b:f3:19:a1:8c:74:ad:4c:33:5d:15:
32:fb:5b:e1:93:27:a0:5f:79:3d:6b:22:5d:0c:77:
19:26:e1:01:71:67:f6:aa:d3:ee:86:c8:21:18:cf:
27:99:07:89:c6:27:1d:5d:e4:21:7e:d7:5d:df:84:
aa:4f:83:df:ff:bf:1f:95:7e:10:af:36:ba:50:ff:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:99:23:70:7A:3B:E3:C4:7F:8E:09:44:4E:6B:C6:08:A5:2B:6D
X509v3 Authority Key Identifier:
keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:ef:3a:71:20:51:c8:b8:c6:8d:e4:09:cd:32:75:3c:f1:
71:f7:a2:a0:57:59:30:e5:a5:b2:f7:80:f0:c3:32:7e:f5:96:
53:d0:71:de:b2:4d:6f:bc:86:bf:a7:13:fb:4f:d6:af:42:02:
47:ca:d0:de:87:48:ce:27:9f:f9:97:b3:48:0a:f2:ed:03:f3:
08:a1:5f:34:0b:c0:db:b2:dd:96:f8:c6:dc:a8:27:cf:7e:ca:
d6:16:e4:32:24:57:6d:18:90:63:4f:00:f2:4b:0d:e3:5c:a7:
da:d5:3a:f6:2d:7a:f3:0e:f7:77:5b:68:97:f8:d1:29:57:25:
29:cd:23:3f:7e:da:e1:19:48:4e:a3:7a:ac:54:fc:37:43:a8:
6e:34:15:f8:81:dc:25:02:27:a8:bd:b1:06:cf:b9:84:44:5d:
f2:4b:c9:0f:de:b2:5a:6a:52:a0:8c:7f:25:94:15:7a:fb:05:
39:7c:8a:45:93:38:7c:09:d8:b3:46:b7:3f:67:d9:d0:85:f0:
7b:e7:99:d3:83:9b:74:7c:a4:b9:cd:8a:81:33:b2:28:59:0f:
b0:b1:8b:11:b0:10:d9:ad:74:46:35:70:66:b8:d2:7a:84:75:
f0:84:70:57:25:c4:a5:e2:a0:ec:b2:d1:38:bf:b2:c2:8d:43:
e3:69:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:20 2025 by rpki-client