Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
File: EYKb9HZLMe40tE2AYpIJqMcGXq8.mft (raw, json)
Hash identifier: ZG0nC2pxMXyoDib9FElcYUMm+Ui9ZHlUzELXfhsXZSc=
Subject key identifier: E4:C1:1D:91:53:D4:4C:A4:F0:8C:E6:DD:59:8D:D0:AA:EC:FD:67:79
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial: 019921B25840F78297FDC50F08193DB4AFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
Manifest number: 35
Signing time: Sun 07 Sep 2025 01:02:40 +0000
Manifest this update: Sun 07 Sep 2025 01:02:40 +0000
Manifest next update: Mon 08 Sep 2025 01:02:40 +0000
Files and hashes: 1: EYKb9HZLMe40tE2AYpIJqMcGXq8.crl (hash: 4uS9xOhcWwNYQ7BA/jNjYd3IEV/ReDB5jnIhZZFtfcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:58:40:f7:82:97:fd:c5:0f:08:19:3d:b4:af:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Validity
Not Before: Sep 7 01:02:40 2025 GMT
Not After : Sep 8 01:02:40 2025 GMT
Subject: CN=e4c11d9153d44ca4f08ce6dd598dd0aaecfd6779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:3f:d2:49:bb:88:75:85:f5:86:18:cf:d1:
c8:a4:5c:98:68:db:fa:56:ed:7f:75:a4:14:8b:3e:
3c:59:b6:ce:75:a0:74:ba:37:79:0c:06:12:37:28:
01:34:fe:c1:0c:68:b3:d6:da:b1:64:ac:13:e4:80:
fb:ad:ea:8a:1f:8a:3c:8a:dc:4d:42:d3:77:53:d1:
16:9a:c1:5c:6d:a1:dc:7a:03:8c:a4:38:2d:9c:67:
89:e0:6d:72:09:b9:13:1a:0e:bc:6e:01:9b:cc:4b:
a3:77:03:b7:cb:d1:b8:48:2f:3d:2b:14:c8:3a:9a:
53:82:c6:13:8d:72:df:85:6f:49:b5:fe:c0:47:e5:
a9:bf:eb:85:57:b9:a5:33:7a:d7:aa:33:6f:38:e8:
0c:61:4e:b4:df:20:20:fc:65:07:6e:e0:4d:9c:a7:
3c:16:fe:64:a5:3d:60:1c:cb:ca:5b:55:b6:73:eb:
8d:a8:60:e9:eb:fa:df:2c:f3:93:9c:eb:09:3f:91:
73:1a:03:5a:28:e8:11:59:f4:13:d7:1a:ff:6d:2b:
a5:9f:69:8f:a4:df:41:6a:04:0f:00:2a:f6:70:b7:
b8:b5:ec:83:99:82:46:95:c3:28:c2:18:75:ac:f9:
6f:72:90:4a:3e:db:b4:79:76:99:e7:3f:47:29:5a:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:1D:91:53:D4:4C:A4:F0:8C:E6:DD:59:8D:D0:AA:EC:FD:67:79
X509v3 Authority Key Identifier:
keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7b:b5:5b:b3:8b:39:c5:ba:57:79:f2:d7:b9:e0:24:a8:51:
d2:c6:04:5c:2b:5d:6e:4e:d6:bd:ed:59:a5:9e:70:23:9d:e4:
da:25:7b:d0:00:91:2a:11:f1:14:ca:bc:23:77:84:f1:75:ca:
e2:f8:d2:0c:3c:f0:74:08:63:20:06:c1:9f:68:b4:57:7f:7f:
f8:cb:44:a9:fc:71:36:8f:a8:a6:dd:60:db:3d:f1:a3:ca:e4:
a8:6d:70:fa:d8:ca:61:73:cc:49:a3:d7:2b:23:b1:02:ea:06:
63:e6:19:f5:6f:aa:fa:8a:10:11:af:04:6b:22:53:dd:a0:6f:
ee:ad:e2:8f:c9:6e:7c:a7:a6:17:10:d8:14:e8:6a:db:32:06:
e1:78:22:08:25:2e:a1:fa:6e:d5:24:23:05:8d:c7:91:55:31:
47:d5:d6:f7:48:fc:ee:4f:b8:73:63:15:03:27:eb:2f:cd:bf:
f0:f9:c4:8a:6c:00:ab:f6:96:f1:af:62:ca:70:d9:b2:4e:07:
5a:27:27:6c:85:9b:d0:41:2b:cf:ce:48:9e:51:22:44:4d:39:
18:ed:e0:83:02:1f:6a:e4:36:52:79:68:f2:15:8b:0a:fa:c7:
94:63:fc:8e:44:30:30:1e:14:49:73:7f:2b:69:68:46:79:51:
e7:03:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:03:59 2025 by rpki-client