Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: 2WSWx1iARfZgySzIpLUfCSWnoNnaetstsEpFiXsfB94=
Subject key identifier: 96:15:A7:72:73:8C:44:0D:C3:9E:47:99:F9:AD:78:0D:F9:E5:1C:DD
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 019921B19F53925237A6B797344B398D359F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 137C
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: 08ErE2ZMTHKTELCgNV51j/zNaiw9+6d8yWDPl6bV1C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9f:53:92:52:37:a6:b7:97:34:4b:39:8d:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=9615a772738c440dc39e4799f9ad780df9e51cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:61:3e:d8:af:9d:eb:4b:01:c8:8f:f1:d2:
91:04:12:bc:9b:d8:1e:94:14:fa:46:37:2b:0d:86:
ed:ba:de:d3:6d:35:19:02:cf:45:23:d7:39:55:5b:
6c:83:a7:1c:a1:43:31:b8:29:8b:fb:f3:85:b2:e9:
c8:0a:2e:d0:b7:3a:81:f3:5d:c5:d8:33:20:a6:0e:
2e:4b:d4:c5:0c:b8:61:08:00:1f:93:ec:dc:33:16:
a5:a4:c4:7b:85:55:f4:fd:ee:b2:c3:f9:83:37:8e:
ab:46:a3:26:13:2c:e0:41:59:8d:43:e3:9c:1b:39:
ab:6e:4f:a5:2a:8a:33:c3:1c:95:f3:29:67:96:49:
b7:0b:6e:4a:1c:da:40:b4:81:07:b9:02:d0:f3:9f:
76:08:f0:fd:b5:d6:05:f4:4c:66:24:ff:77:96:52:
47:dd:5c:bf:5b:20:f0:ad:b0:e6:7d:70:db:c5:0e:
63:19:34:e4:43:11:e2:04:11:9c:26:56:7d:b5:84:
71:01:15:36:f3:25:18:5e:57:9f:d6:a5:fc:ee:5c:
47:28:85:32:f8:76:12:3a:90:5b:86:7c:07:fb:36:
40:57:cf:54:23:20:64:06:de:f1:bc:7e:40:8f:80:
c4:98:5c:62:f5:0b:57:f6:a0:1b:39:8d:78:db:a4:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:A7:72:73:8C:44:0D:C3:9E:47:99:F9:AD:78:0D:F9:E5:1C:DD
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:6d:09:d7:4f:64:7d:51:07:86:43:8f:24:72:06:c8:29:
cb:86:73:18:13:c4:7a:0d:86:6a:40:e2:fd:95:b9:0f:e0:c5:
ca:b9:ad:b5:6d:7b:85:2e:f1:9a:02:9e:3d:f0:99:93:26:38:
95:a3:3e:40:c3:7e:0d:97:ce:f3:73:2c:ce:c8:a9:7a:a1:d2:
49:25:2d:c2:b3:4e:4c:66:2d:2f:03:0e:b7:a4:4b:dd:28:72:
c2:b4:76:54:d3:d4:a3:53:74:62:9e:51:77:f2:4d:5e:2a:0e:
7d:68:15:5a:3c:96:91:5b:3a:e5:e1:96:d9:8f:c1:7d:b4:63:
27:ad:85:b0:90:28:20:63:6f:84:df:c2:28:a1:4c:e7:3e:39:
ff:1b:02:f1:a4:70:2a:4d:09:1b:f8:0e:e0:66:7f:97:54:a7:
25:6e:3f:f0:99:ba:9e:65:63:d6:9f:bc:f3:c1:06:a6:f8:d3:
9f:0e:b3:01:88:60:e0:ae:bc:ee:82:9c:27:dd:e4:bf:ec:8f:
7f:d9:7d:ad:30:f7:7d:f0:7a:20:b0:8e:ac:4d:08:db:1c:d0:
53:5a:2d:60:75:99:93:9c:84:1a:05:fc:50:75:d9:b9:84:aa:
57:11:0a:6a:2f:9a:9f:98:6b:c2:d3:1d:9c:33:7f:a1:08:7d:
a8:9b:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:27 2025 by rpki-client