
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: Wf3rD/UlhhgB4x0SNVD1dal9RDIG+HnDSY6kNh0j3Xc=
Subject key identifier: B2:E3:A6:9A:75:BD:82:49:AC:19:F6:78:EE:AB:87:72:CE:7C:84:EC
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 019923A0D6251EDF82A948771229FA1A6976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0D43
Signing time: Sun 07 Sep 2025 10:02:47 +0000
Manifest this update: Sun 07 Sep 2025 10:02:47 +0000
Manifest next update: Mon 08 Sep 2025 10:02:47 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: s+NZI9Gg8pOCjfYquukCkJR9+hz2LPiWuD16b3lLh8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d6:25:1e:df:82:a9:48:77:12:29:fa:1a:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: Sep 7 10:02:47 2025 GMT
Not After : Sep 8 10:02:47 2025 GMT
Subject: CN=b2e3a69a75bd8249ac19f678eeab8772ce7c84ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:5f:98:49:f2:a5:f9:7c:66:1a:ba:62:81:
aa:f6:69:27:d9:ae:3a:5a:fc:3a:cc:14:3b:b3:fe:
54:d6:45:c9:dd:fe:4b:16:5b:2e:26:4a:6d:f2:73:
c9:21:c0:e6:91:12:8d:ba:c9:8a:91:88:0b:56:cb:
22:a3:3d:73:bc:a8:84:5e:00:77:6d:02:08:fb:62:
aa:92:a4:40:1e:02:03:bd:57:56:18:0b:10:42:8d:
ee:09:62:53:37:27:0a:9d:e1:e8:ee:1f:0e:2d:dd:
d5:3c:24:91:4f:c6:b9:75:d6:53:09:bc:9f:e0:a5:
5e:23:8d:b3:af:51:d2:c3:67:f1:55:1c:c1:ec:45:
7b:1b:27:c0:6e:3d:3e:41:eb:a3:e5:c1:4f:6b:2f:
35:87:16:e7:fa:44:96:80:43:1a:7e:6f:15:64:f5:
d8:f0:6b:ca:d7:a9:53:90:2e:49:3a:a1:c6:4d:4b:
73:4c:2f:15:ea:14:2a:64:cd:38:a6:2e:c6:a3:0f:
68:e0:26:1d:8f:3c:84:51:dc:b4:81:c0:45:63:a3:
4d:3d:19:fc:8e:43:15:65:be:03:ff:e4:fe:9c:d2:
35:a8:46:85:b8:f6:be:55:82:13:2e:ce:98:66:c3:
e4:ef:78:2a:f7:5f:7f:83:5d:ad:0a:e1:f9:e3:21:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:A6:9A:75:BD:82:49:AC:19:F6:78:EE:AB:87:72:CE:7C:84:EC
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:24:0e:9d:0e:69:5c:04:6b:e3:66:27:3b:fc:ea:5d:2b:
e1:c6:61:0b:df:4a:ea:62:93:1e:f8:97:97:0f:41:b0:60:56:
3d:74:42:01:bb:1b:3c:5b:68:23:61:91:db:d1:74:c5:ee:31:
cb:7f:26:75:b1:9c:ff:03:8e:4a:d5:fb:70:59:d5:a0:ec:6c:
eb:7c:10:5f:37:5b:f1:a9:12:bb:a1:fa:22:9c:19:7f:68:c0:
0b:d3:1b:f8:51:77:24:3e:54:fd:a7:53:30:82:7e:6d:76:79:
e7:3a:2a:9f:ca:0a:d8:bc:65:3e:af:8c:50:7a:04:f8:80:32:
55:84:0b:23:08:a2:9f:ac:bd:30:81:e5:b5:2a:94:70:fa:f0:
06:96:3a:48:06:1b:85:cf:2a:ad:45:1c:ad:22:94:a1:da:a0:
f6:fa:ea:3f:a2:ad:ee:07:e6:7b:30:e8:3c:e6:2c:c0:ee:1f:
94:b9:a2:a9:74:ed:6f:82:2c:c8:e1:3e:ae:42:b8:03:6f:c1:
50:b9:ff:ac:7c:0b:21:b7:64:e1:35:a9:e1:8a:99:75:94:bf:
d7:64:f9:ae:92:db:16:37:ef:ad:e9:34:6e:f4:9d:2f:d0:c4:
c6:7b:95:96:55:83:a4:2b:47:74:11:34:47:da:0e:a8:4a:0e:
c1:8f:aa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:20 2025 by rpki-client