Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
File: b_eJEzFFDchig6CJvZRw5pw37RI.mft (raw, json)
Hash identifier: 9X3e3hQUihgguI7RkV7ZdQNxcU3EYjgctD8qNqVWPdg=
Subject key identifier: 17:A9:E3:6F:68:D0:DE:5D:B6:3A:49:87:39:02:A8:5C:A5:EE:E9:C3
Authority key identifier: 6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
Certificate issuer: /CN=6ff7891331450dc86283a089bd9470e69c37ed12
Certificate serial: 01991809D6130B009AD606D90A7D0BAA9A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
Manifest number: 023B
Signing time: Fri 05 Sep 2025 04:02:01 +0000
Manifest this update: Fri 05 Sep 2025 04:02:01 +0000
Manifest next update: Sat 06 Sep 2025 04:02:01 +0000
Files and hashes: 1: b_eJEzFFDchig6CJvZRw5pw37RI.crl (hash: Wh5f9xq7oPbcY6JKUAXxfHMj7ItA3XfknPPzWGvk7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:d6:13:0b:00:9a:d6:06:d9:0a:7d:0b:aa:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff7891331450dc86283a089bd9470e69c37ed12
Validity
Not Before: Sep 5 04:02:01 2025 GMT
Not After : Sep 6 04:02:01 2025 GMT
Subject: CN=17a9e36f68d0de5db63a49873902a85ca5eee9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:59:d8:0b:55:a9:b6:b7:36:a1:02:52:45:
13:45:05:d1:e1:37:d7:bb:73:be:ec:12:ed:33:25:
f9:ce:cd:7a:10:41:53:c3:c6:f6:bb:5c:66:9b:0c:
c0:e8:bd:2c:8b:66:64:79:08:19:67:42:98:e2:b0:
d9:56:0f:34:0f:b8:e0:14:30:4e:5c:c1:e7:94:b4:
be:d9:d9:98:b7:03:68:d7:57:0c:03:5f:95:a5:78:
e4:70:6d:83:9e:f8:8c:f3:35:dc:f3:dc:aa:6a:cb:
7d:d5:f7:57:b2:3b:3e:79:60:80:28:90:54:3d:e1:
d0:af:ed:06:72:02:1f:9a:f9:7b:2a:76:bf:1b:55:
0d:08:55:2e:01:85:e8:6b:4f:36:4b:ee:10:f8:94:
7e:42:b7:11:05:0e:7d:24:48:3f:e3:5d:52:07:47:
ed:41:48:d8:27:11:07:c6:51:86:aa:c8:fc:f3:68:
3d:2a:62:c6:d0:7e:68:af:d2:1d:d2:ff:cb:e3:ff:
79:2e:a5:3e:af:bd:43:9a:2f:0a:3e:6a:82:92:dc:
b1:44:e1:f4:2e:97:c9:55:c6:6f:f1:4d:cc:83:52:
ce:55:9a:12:94:1c:0a:99:a2:54:25:99:8b:27:14:
62:59:c0:f8:a4:eb:79:bc:84:2f:4a:31:25:fe:74:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:E3:6F:68:D0:DE:5D:B6:3A:49:87:39:02:A8:5C:A5:EE:E9:C3
X509v3 Authority Key Identifier:
keyid:6F:F7:89:13:31:45:0D:C8:62:83:A0:89:BD:94:70:E6:9C:37:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_eJEzFFDchig6CJvZRw5pw37RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50926e-f0e5-43d6-8e3c-d575b9624de7/1/b_eJEzFFDchig6CJvZRw5pw37RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a6:85:ff:75:e7:25:8e:cc:b1:85:e5:8a:94:4c:e0:66:f5:
46:f9:ac:bf:53:7a:04:76:49:aa:92:48:5b:06:7f:f7:ba:12:
a6:13:d2:29:eb:9b:45:eb:0a:63:42:9d:13:88:d7:b8:e8:23:
81:e4:6e:03:8f:e2:f1:91:1e:f4:60:6d:4b:67:9a:cd:6e:52:
8e:93:c3:a4:7e:a5:c5:d9:7d:a5:e2:52:14:63:e7:fa:01:88:
31:87:1f:94:e3:4d:9a:7a:18:12:48:58:c6:b3:cd:ae:71:91:
e7:1f:b1:e9:5f:2e:3b:2b:48:fe:46:f1:6f:58:2e:7c:f5:a8:
16:7c:e5:1f:e7:aa:ae:e5:b5:c9:cb:34:0f:1f:8b:69:26:1c:
25:56:96:1c:b7:93:b6:8f:a3:fd:3c:6a:a7:cc:04:81:ce:1f:
b1:ae:b6:2c:94:fd:42:48:da:5a:6f:01:20:9d:e5:41:20:f8:
6b:2d:ad:16:da:db:c7:0a:1b:78:59:3f:6a:08:fc:b3:02:e5:
f1:25:bf:80:fe:7a:4f:50:23:0e:31:5e:bb:3c:38:50:61:16:
38:70:cd:35:87:08:b3:b0:22:c3:00:80:a2:11:b4:f1:de:1c:
64:82:44:3a:39:91:18:70:c3:fb:3b:73:c5:9c:ec:3b:6e:d4:
6f:45:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:30 2025 by rpki-client