Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: QiKb77IlVCTyvqiPKZf8gHrp1xRuWT82HxQfVS1wTFE=
Subject key identifier: 67:F2:CF:7D:FC:8A:8D:1E:42:E0:4E:EB:C3:D9:5D:2F:10:F8:A8:B7
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 0199221EAEED0829C6576C3FECED1F5F8A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: EMPx87Fw+nhQc8aagOsBUphgTzBI7CHEh0pl1MIQL+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ae:ed:08:29:c6:57:6c:3f:ec:ed:1f:5f:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=67f2cf7dfc8a8d1e42e04eebc3d95d2f10f8a8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:36:d9:11:3a:3e:21:e2:ca:c9:4d:34:db:
ef:ff:b7:45:f9:3b:ca:9c:fc:b7:3e:2e:c8:4b:5e:
a6:ca:04:2e:ee:97:72:1a:e0:ae:47:4a:c6:89:57:
06:e8:16:d3:85:53:c1:f3:99:66:c4:f0:d5:80:53:
6b:15:f7:cd:c3:d9:a9:3c:9d:f7:fb:e6:d5:5e:d2:
14:e4:e0:ea:72:fb:69:d7:76:3a:56:69:62:4e:74:
a4:d1:52:e3:db:ac:1c:ca:49:21:be:04:95:56:ec:
ea:9b:ac:7a:e2:dc:c4:8e:13:40:6a:c3:fb:84:92:
02:5c:ae:fd:4c:5e:a6:db:2d:26:92:a9:20:13:7f:
9c:48:04:f3:1d:d1:ec:ec:82:db:dc:c7:54:7d:2f:
8b:d1:63:55:8a:ee:86:43:c0:9d:42:ab:ac:ec:bd:
ff:ae:47:f0:53:94:da:b0:34:9b:d9:a7:ea:85:84:
2c:df:7a:31:84:e0:27:63:b4:4a:cc:01:ee:0c:68:
db:23:69:7b:cc:b8:60:4a:b9:3b:20:0d:47:7c:0b:
f6:1f:eb:a2:ca:2c:c7:1c:9b:36:ef:a9:df:b2:2a:
2a:87:76:3b:05:08:3f:a0:0c:ba:50:99:4a:5c:38:
ef:dc:48:90:14:7c:7c:aa:40:9e:0a:5b:43:c7:57:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:CF:7D:FC:8A:8D:1E:42:E0:4E:EB:C3:D9:5D:2F:10:F8:A8:B7
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:45:d3:99:cf:89:de:ff:47:12:bb:65:39:75:65:77:23:
f9:18:6b:97:a4:7d:1d:71:46:8b:ef:28:c3:fb:59:0b:da:0a:
d5:30:8b:7e:37:04:05:6f:66:b8:18:01:f4:00:cb:c2:db:53:
0d:f9:f9:2c:79:5c:b5:d3:aa:b7:c2:8b:ae:15:34:48:33:5a:
05:5f:d9:2e:9f:ea:c1:ab:76:32:c1:e1:67:8f:5b:ef:94:20:
ae:7f:1e:47:d3:df:b3:81:36:2d:9c:06:21:84:dc:33:5e:c4:
3b:b3:82:be:64:bd:88:67:71:1c:f8:07:0b:4e:b8:03:f9:7a:
c8:87:78:1d:9e:18:69:74:79:ef:cd:4a:03:cb:7a:d5:42:83:
ac:ee:d6:1e:95:43:0b:4a:e4:19:3f:cb:4d:1e:4d:f6:94:d1:
65:e0:f3:0b:42:f4:d6:6f:74:73:81:5f:7f:fb:82:a8:71:f0:
fa:c9:67:e3:62:0e:eb:4b:d8:f3:95:2b:27:a1:a4:51:26:ed:
00:1b:09:9a:da:e3:f1:a6:7b:35:ca:11:25:9a:4c:89:dc:09:
df:74:82:e5:8b:78:c5:8c:e1:b7:4b:b1:32:79:c3:4e:95:fe:
d0:4b:46:9c:e2:7d:59:c4:66:72:21:20:35:dd:99:f3:bd:c1:
9a:b3:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client