Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: jL7kUau2b9oEsPEvTFV7NDmLpaXIKtjCR0EhPOW0kU8=
Subject key identifier: 28:1B:B0:A1:51:D7:5A:17:09:E2:41:5A:1B:CE:F8:95:96:54:31:A8
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019921E76856B7CAAAACC439FF4626AC12EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 15C8
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 22+8A10NSWijMa4LDv9FbgXqI/vkTVzSPJpacpeRG5o=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:68:56:b7:ca:aa:ac:c4:39:ff:46:26:ac:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=281bb0a151d75a1709e2415a1bcef895965431a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:da:60:dd:eb:b8:fa:da:f7:af:70:7b:39:
77:1e:28:2b:52:b6:07:e8:63:35:97:46:b6:53:46:
50:68:4a:ca:c7:0b:20:a2:14:d6:ab:7a:23:cd:a0:
b3:0d:d7:93:49:47:01:39:e6:dc:f7:a9:08:d7:0f:
f7:73:71:b2:93:40:80:b7:4c:fe:57:57:4b:38:7b:
01:08:28:07:7f:92:71:a9:c5:9d:19:e2:51:9d:77:
96:86:5d:81:4e:68:b8:2f:91:55:c1:ca:bb:87:00:
72:12:e1:54:98:c4:f0:92:8e:39:d8:23:69:73:80:
a9:46:c2:41:3b:3c:6d:74:5b:dd:cf:53:fa:e6:04:
fb:0e:b5:62:3d:5e:43:4c:21:dc:d6:1b:62:c7:8d:
d8:56:56:a0:6e:08:48:26:8d:75:24:0c:e7:29:d6:
06:5b:a7:de:95:f2:9c:01:b6:89:a0:f9:22:86:a8:
e5:09:e0:7a:bf:e8:6c:80:fe:55:76:db:64:2c:96:
84:d4:05:17:89:cc:ba:e3:bf:79:64:81:27:51:c2:
d3:97:98:c3:d5:65:14:6b:bd:b6:19:07:72:fe:e5:
1a:58:51:f3:e4:85:87:3e:fc:7e:59:92:d0:c5:1d:
7c:90:2c:61:a8:57:f2:1c:a7:bc:a8:4a:c5:ec:0c:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:B0:A1:51:D7:5A:17:09:E2:41:5A:1B:CE:F8:95:96:54:31:A8
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:7d:36:b1:7a:92:dd:5e:66:b1:a0:49:00:82:5a:89:bb:
a6:0c:2f:60:63:1d:a5:ff:46:f0:15:de:82:5a:36:67:2e:33:
34:65:1e:7b:0a:84:05:9d:a6:2c:a8:e0:71:2a:4d:8b:aa:27:
b5:45:78:9a:4c:10:39:89:a2:82:af:dc:7e:4c:d4:b9:e4:3e:
0b:af:19:71:df:1c:de:d4:99:f2:e3:eb:77:dc:06:99:07:3f:
ea:21:2d:d0:89:02:21:e2:ea:9e:9d:5c:a2:c4:30:5b:54:35:
0a:bc:37:88:b8:32:bf:bf:d6:01:dc:61:14:4a:fa:dc:0f:90:
10:92:fa:dc:d6:f6:97:9b:56:55:de:d4:f7:f1:37:d8:20:2b:
ba:43:c9:f8:94:eb:09:e8:7b:5f:7f:ae:2d:0d:c4:41:28:4d:
a8:0d:d3:17:b7:49:a5:55:68:c7:11:82:b6:6d:66:fb:1b:84:
04:4c:2e:d4:20:7f:06:47:d2:8e:32:7d:ab:e9:ef:12:2a:74:
f4:85:e6:74:ae:54:7f:87:3a:5e:2c:b2:16:d0:38:a2:2a:eb:
5d:82:47:dc:57:93:32:55:44:c8:46:d5:42:28:12:2a:c6:31:
b3:67:0f:1b:c9:1f:1a:31:30:67:0d:3c:ba:44:a2:2e:9b:7d:
3f:17:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:15 2025 by rpki-client