
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File: e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier: zoL570PrQQPUGT+IXGIW3cxnqp0nfNefDwKxQtjY3KQ=
Subject key identifier: 32:61:EF:71:42:01:75:43:14:3C:AC:DF:A2:02:23:29:E6:05:E3:B1
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer: /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial: 019921B23A02627A5FA4AA3485FB521CE8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number: 0A73
Signing time: Sun 07 Sep 2025 01:02:32 +0000
Manifest this update: Sun 07 Sep 2025 01:02:32 +0000
Manifest next update: Mon 08 Sep 2025 01:02:32 +0000
Files and hashes: 1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: Z/+SbQ972auUmt8vKnd0F2pI1mzICXQ4YvDvOpUZkdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:3a:02:62:7a:5f:a4:aa:34:85:fb:52:1c:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Validity
Not Before: Sep 7 01:02:32 2025 GMT
Not After : Sep 8 01:02:32 2025 GMT
Subject: CN=3261ef7142017543143cacdfa2022329e605e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5f:6f:c9:3f:cc:53:91:72:06:65:86:1e:3e:
7c:75:c9:dd:e3:50:8c:fd:56:bb:c6:32:af:cf:cd:
fd:a9:96:f6:24:86:5f:5e:88:06:83:c7:bd:0c:32:
4c:0c:a9:50:a8:ce:74:48:60:4f:e0:e0:bd:f5:9d:
81:bb:dd:82:cf:c3:d8:0a:6d:28:5f:52:32:aa:ea:
9f:75:78:e9:17:57:72:e8:e2:ef:91:0e:10:2b:2b:
e9:06:e6:63:e8:64:7d:f6:99:6c:6d:f1:c1:79:45:
76:e3:f7:91:5d:3a:ca:5b:41:a7:bd:09:dd:91:6b:
18:c2:4f:10:bc:a4:78:33:6c:7c:42:07:ff:ea:16:
c0:0a:fb:c8:f9:7b:c3:db:1b:7a:89:44:f6:14:f0:
93:72:a7:a9:24:d6:70:1b:a1:09:04:3b:68:4c:ef:
6c:01:66:83:aa:bc:d8:f8:7f:71:03:7f:c2:95:2e:
e3:83:e9:c0:ec:ad:0c:12:9a:f4:7b:e9:60:0a:a1:
df:16:89:3f:07:ed:78:66:74:4a:15:eb:6d:6c:ff:
ea:08:f0:35:c0:ff:a4:66:3d:c8:03:26:a7:39:68:
a4:ab:f8:ed:47:f4:7e:28:3c:e1:a0:49:51:e2:1e:
fb:51:57:3c:b6:20:97:12:85:39:e8:11:8c:7f:31:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:EF:71:42:01:75:43:14:3C:AC:DF:A2:02:23:29:E6:05:E3:B1
X509v3 Authority Key Identifier:
keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:99:21:17:16:a2:2e:da:59:ba:09:bf:cc:ce:1c:bb:cf:
8c:51:4e:cc:d6:f4:6c:d7:9e:a2:4e:05:ae:85:14:72:ea:b0:
03:8a:32:6a:ad:02:de:b4:7d:79:2f:2d:0b:2b:51:7c:61:94:
f0:bb:44:ea:99:51:a8:1c:22:72:33:75:ab:0e:a3:b9:b3:bf:
30:46:79:c2:e4:28:5a:72:09:e3:bc:51:29:9b:da:6d:84:66:
6e:4f:97:b7:02:c0:82:fc:21:d1:14:00:b1:46:88:c2:f0:c4:
db:d0:e8:64:47:ed:bd:5d:a5:0d:c8:dc:a7:d5:b8:05:5e:06:
c9:b5:71:f2:95:8b:d3:c0:f5:f4:8d:5f:7d:21:34:f9:3b:4e:
fc:fd:cc:fb:bb:ae:da:dc:85:01:c2:8b:da:2d:22:d6:ed:dc:
44:16:24:36:a4:22:9a:51:a9:54:bd:41:32:f3:0e:f7:d6:c1:
c0:ef:4b:18:01:b7:d1:c7:ee:24:e0:5e:57:a4:2b:20:36:e2:
62:d3:6a:e9:ab:55:f9:2e:cc:fa:30:2b:53:83:55:da:58:6b:
c5:cb:59:3c:46:7e:ce:f4:ac:8f:90:d1:b8:a2:3b:ec:7f:c6:
e2:70:b0:a1:3e:87:ef:c3:b3:12:84:c9:61:36:dc:5d:55:04:
96:a4:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:04 2025 by rpki-client