Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File: e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier: hY5EU6gOdDRsf0ZsOvSMTDPlA7jrNs/uQPoxu3qwDk0=
Subject key identifier: 37:C3:7E:31:EC:C0:A7:0D:B9:5F:A1:E8:BD:48:9A:9F:5D:66:6E:2E
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer: /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial: 019A2854CCD209395951E02367131EC693DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number: 0AFB
Signing time: Tue 28 Oct 2025 01:00:37 +0000
Manifest this update: Tue 28 Oct 2025 01:00:37 +0000
Manifest next update: Wed 29 Oct 2025 01:00:37 +0000
Files and hashes: 1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: kF8GB2dtUZoVS2lBwwIc22nhOtRqqnIlWsEmNUMGvgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:cc:d2:09:39:59:51:e0:23:67:13:1e:c6:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Validity
Not Before: Oct 28 01:00:37 2025 GMT
Not After : Oct 29 01:00:37 2025 GMT
Subject: CN=37c37e31ecc0a70db95fa1e8bd489a9f5d666e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:52:85:1b:8c:a4:50:f1:5f:b5:db:4b:7d:
28:55:9e:a1:89:c3:1d:64:9f:cf:7e:e4:a0:54:0c:
b6:29:87:99:f4:55:2f:44:31:29:e1:f8:dd:c8:71:
d8:b5:d0:fe:97:16:ea:09:9a:f6:eb:0f:0f:cd:3f:
59:15:74:82:49:2b:c2:3e:b3:ef:69:c7:fe:19:cf:
11:57:fe:13:15:30:2b:20:c5:5f:61:77:1f:1d:d2:
1f:ed:e2:69:52:1a:08:a1:4f:1f:a8:87:c2:8f:72:
3c:d3:c9:87:4d:e8:dd:d1:8b:70:2b:7f:bd:61:dd:
42:97:bf:c5:5c:1a:7e:7e:8c:4f:6d:84:73:84:b2:
b8:f8:a2:de:81:9a:71:e4:65:7a:35:61:8d:38:97:
26:f1:a0:43:6b:61:82:e6:7b:c9:64:9b:b7:53:b5:
54:41:fb:7d:5c:29:24:65:fd:49:b4:0a:52:95:c4:
13:0c:ac:b6:f3:20:1f:3e:4c:42:99:f0:3a:dc:59:
7b:af:72:f2:71:07:a6:b5:7e:00:c8:83:bf:28:2a:
14:61:6c:22:d4:05:5f:39:cb:cf:d6:1c:24:58:03:
cc:e9:a9:0c:ad:33:04:21:58:b1:df:b4:0d:cf:17:
51:ed:fb:98:bf:55:a0:9d:52:cc:a2:a3:06:6c:97:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:7E:31:EC:C0:A7:0D:B9:5F:A1:E8:BD:48:9A:9F:5D:66:6E:2E
X509v3 Authority Key Identifier:
keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:93:42:b4:f1:f4:7e:28:2b:d6:78:f3:f8:da:9d:ed:6b:4b:
b7:66:42:7a:4f:ae:36:ac:a9:a6:d5:86:61:43:16:10:26:9c:
6a:f1:99:bf:71:ec:af:a3:ea:20:d4:70:d1:99:ac:02:b6:95:
8f:83:b7:4e:92:d9:6f:74:ab:49:5b:fb:1f:e5:6e:f4:1b:f7:
d2:a4:c7:9d:ef:2f:44:42:e8:92:20:8b:9c:3b:b9:1f:29:6f:
b9:3f:cd:89:c9:4c:a2:67:c5:93:43:73:0b:b1:c6:b6:c1:81:
81:a5:58:4e:8f:87:b4:31:45:eb:03:0e:f4:58:3b:70:ff:35:
79:a2:8a:9d:5d:44:15:c3:13:ad:79:a5:b0:8f:90:d4:6d:be:
a1:61:7e:ce:51:20:f7:29:0c:1e:28:1b:45:80:0f:20:a6:21:
b3:bc:f0:b7:c6:00:70:9f:d3:13:18:5f:77:b6:c0:b6:62:a3:
8e:38:25:15:7e:2c:54:04:d8:12:8e:cf:c8:fc:33:f4:4a:9e:
9e:9e:e7:76:60:4c:86:aa:17:f2:c5:a2:8e:f6:bd:f3:99:dc:
a2:62:bb:c8:ae:08:3c:5b:7b:23:f5:52:37:f9:97:b8:4e:33:
8f:62:4c:e7:e8:e4:a8:4b:e9:84:6c:11:d4:54:7d:85:7b:75:
f8:15:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:35:45 2025 by rpki-client